critical9.1
CVE-2023-45278
Yamcs API Directory Traversal vulnerability
Impact
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.yamcs:yamcs | < 5.8.7 | 5.8.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spaceapplications | Yamcs | Version 5.8.6 |