yamcs__yamcs_CVE-2023-45277_5-8-6

Yamcs Mission Control Website: https://yamcs.org Mailing list: Google Groups Yamcs is a mission control framework developed in Java. It uses an open-ended architecture that allows tailoring its feature set using yaml configuration files. You can also extend the default feature set by writing cust...

CVE-2023-45277

CVE-2023-45277 affects Yamcs 5.8.6. The issue is a directory traversal in the storage API function, allowing an attacker to escape the base directory of buckets, freely navigate system directories, and read arbitrary files. The vulnerability is network-accessible with low attack complexity and no...