An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.

Published Oct 19, 2023 · Updated Aug 2, 2024 · Assigned by mitre