GHSA-43fw-536j-w37j

Yamcs API Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-45278

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.yamcs:yamcs	< 5.8.7	5.8.7

Details

As written in the advisory (Markdown source, shown as plain text).

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-45278 advisory
https://github.com/yamcs/yamcs package
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7 web
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies web