Skip to content
OpenAdvisories

Package · Maven

org.yamcs:yamcs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.1
    CVE-2023-45278

    Yamcs API Directory Traversal vulnerability

    Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

    org.yamcs:yamcs Maven
  • High 7.5
    CVE-2023-45277 Public exploit

    Yamcs Path Traversal vulnerability

    Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.

    org.yamcs:yamcs Maven
  • Medium 5.4
    CVE-2023-45280

    Yamcs Cross-site Scripting vulnerability

    Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the fil…

    org.yamcs:yamcs Maven
  • Medium 5.4
    CVE-2023-45279

    Yamcs Cross-site Scripting vulnerability

    Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploa…

    org.yamcs:yamcs Maven