Description
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2021-31407 Vulnerability in maven package com.vaadin:flow-server
CVE-2020-25638 Vulnerability in maven package org.hibernate:hibernate-core
CVE-2020-15119 Vulnerability in maven package org.webjars.bower:auth0-lock
CVE-2022-45401 Vulnerability in maven package org.jenkinsci.plugins:associated-files
CVE-2020-26302 Vulnerability in maven package org.webjars.bower:is_js