Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2023-45278

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

VectorNETWORK

PublishedOct 19, 2023, 17:15

Published Bycve@mitre.org

Base Score

Score9.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.yamcs:yamcs(Maven)05.8.7N/A

References

https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies

Weakness Type

CWE-22

CVSS Metrics

Base Score

9.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK