CRITICAL🇵🇱 Wersja polska

CVE-2023-45278

CVSS 9.1v3.1pub. 2023-10-19upd. 2024-11-21

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Spaceapplications Yamcs

    APP
    Spaceapplications
    5.8.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2026-46621CRITICAL9.1PL ✓same product

Yamcs RCE przez niezabezpieczony silnik skryptów Python (Jython)

CVE-2026-44632CRITICAL9.1PL ✓same product

RCE w Yamcs — wstrzyknięcie kodu Java przez silnik algorytmów

CVE-2026-46562CRITICAL9.8PL ✓same product

Yamcs: RCE poprzez brak ClassFilter w silniku Nashorn JavaScript

CVE-2023-45277HIGH7.5same product

Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functiona...

CVE-2026-55548MEDIUM4.3same product

Yamcs to framework do obsługi misji kosmicznych. W wersjach przed 5.12.8 i 5.13.2 endpoint PacketsApi.exportPa...