CVE-2023-45277: Path Traversal
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-45277?
CVE-2023-45277 is a directory traversal vulnerability in Yamcs 5.8.6 that allows an attacker to escape the base directory of the buckets, navigate system directories, and read arbitrary files.
How does the vulnerability in Yamcs 5.8.6 affect the system?
The vulnerability in Yamcs 5.8.6 allows an attacker to perform directory traversal, enabling them to access files they should not have access to.
What software versions are affected by the Yamcs directory traversal vulnerability (CVE-2023-45277)?
Yamcs 5.8.6 is affected by the directory traversal vulnerability (CVE-2023-45277).
How can I fix the directory traversal vulnerability in Yamcs (CVE-2023-45277)?
To fix the directory traversal vulnerability in Yamcs, update to version 5.8.7 or higher.
What is the Common Weakness Enumeration (CWE) of the Yamcs directory traversal vulnerability (CVE-2023-45277)?
The Yamcs directory traversal vulnerability (CVE-2023-45277) is classified under CWE-22 (Path Traversal).