212 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the IAM API endpoints, including listUsers, getUser, listGroups, and getGroup. An attacker can retrieve sensitive user information, such as usernames, superuser status, and group memberships, by sending...
GHSA-P2RJ-MRMC-9W29 Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints
Summary The IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. As a result, any authenticated user even those with low or no privileges can enumerate all user accounts in the system, including their...
PT-2026-43457
Summary A Server-Side Code Injection vulnerability exists in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory. The application dynamically compiles and evaluates user-controlled algorithm text without enforcing a secure sandbox. An authenticated user wi...
PT-2026-44162
Summary A Server-Side Code Injection vulnerability exists in the Yamcs script evaluation engine for Python algorithms. The application dynamically compiles and evaluates user-controlled algorithm text using Jython via the JSR-223 ScriptEngine API without enforcing a secure sandbox. An authenticat...
PT-2026-43455
Summary The IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. As a result, any authenticated user even those with low or no privileges can enumerate all user accounts in the system, including their...
PT-2026-43456
Name of the Vulnerable Software and Affected Versions YAMCS affected versions not specified Description The authentication endpoint "POST /auth/token" in yamcs-core lacks rate limiting, account lockout, and failed attempt throttling. This allows an unauthenticated remote attacker to perform...
LDAP Injection
Overview Affected versions of this package are vulnerable to LDAP Injection via the LdapAuthModule process. An attacker can gain unauthorized access to user accounts by injecting specially crafted input into the username parameter during LDAP authentication. Note: This is only exploitable if the...
CVE-2026-42568
creationtimestamp| type| source ---|---|--- 2026-05-21 15:03:27+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-cqh3-jg8p-336j 2026-05-29 15:00:15+00:00| seen| Telegram/a86W4JR7O--z7UEFDSjPGooPu8cJg6Qw5misZZ2a8xOkaUM 2026-05-29 21:00:04+00:00| seen|...
CVE-2026-46562
creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:43+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-vmwp-vh32-rj75 2026-07-16 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqjqdci2o 2026-07-16 18:59:17+00:00|...
CVE-2026-46621
creationtimestamp| type| source ---|---|--- 2026-05-21 15:02:27+00:00| published-proof-of-concept| https://github.com/yamcs/yamcs/security/advisories/GHSA-2g95-6x5q-xjwj 2026-07-16 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroqkzgbc2j 2026-07-16 19:19:19+00:00|...
CVE-2023-45278
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request...
CVE-2023-45280
Yamcs 5.8.6 allows XSS issue 2 of 2. It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrar...
CVE-2023-45279
Yamcs 5.8.6 allows XSS issue 1 of 2. It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from...
EUVD-2023-2643
Malicious code in bioql PyPI...
EUVD-2023-50686
Malicious code in bioql PyPI...
EUVD-2023-51438
Malicious code in bioql PyPI...
EUVD-2023-2664
Malicious code in bioql PyPI...
EUVD-2023-49583
Malicious code in bioql PyPI...