CVE-2023-45277

Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2)

published October 19, 2023

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01218 · 68.4th percentile
Published
2023-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2)
    cvelistv5