Description
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2019-3799 Vulnerability in maven package org.springframework.cloud:spring-cloud-config-server
CVE-2014-0035 Vulnerability in maven package org.apache.cxf:cxf-rt-ws-security
CVE-2022-23541 Vulnerability in maven package org.webjars.npm:jsonwebtoken
CVE-2019-10247 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2020-13957 Vulnerability in maven package org.apache.solr:solr-core