Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS00M2Z3LTUzNmotdzM3as4AA2kO

Yamcs API Directory Traversal vulnerability

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

Permalink: https://github.com/advisories/GHSA-43fw-536j-w37j
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00M2Z3LTUzNmotdzM3as4AA2kO
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: about 1 month ago
Updated: 17 days ago

CVSS Score: 9.1
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Identifiers: GHSA-43fw-536j-w37j, CVE-2023-45278
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-45278
• https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
• https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
• https://github.com/advisories/GHSA-43fw-536j-w37j

Affected Packages