Description
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2017-1000427 Vulnerability in maven package org.webjars:marked
CVE-2023-31890 Vulnerability in maven package com.glazedlists:glazedlists
CVE-2018-1272 Vulnerability in maven package org.springframework:spring-core
CVE-2021-43786 Vulnerability in npm package nodebb
CVE-2023-40178 Vulnerability in npm package @node-saml/node-saml