Yamcs vulnerabilities

2 known vulnerabilities in Yamcs from Spaceapplications. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Yamcs: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45278Oct 19, 2023SpaceapplicationsEPSS 1.83%

  Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

• 7.5 High severity

  Yamcs: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45277Oct 19, 2023SpaceapplicationsEPSS 1.22%

  Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.