Spaceapplications vulnerabilities
We track 2 vulnerabilities in Spaceapplications products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2023.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Spaceapplications vulnerabilities
- 9.1 Critical severity
Yamcs: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
- 7.5 High severity
Yamcs: Improper Limitation of a Pathname to a Restricted Directory
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.