CVEvulnerability
CVE-2023-45277
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-22
Description
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.
Affected configurations
• spaceapplications yamcs 5.8.6
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7 Patch
- https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies Exploit, Third Party Advisory
- https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7 Patch
- https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies Exploit, Third Party Advisory