Yamcs API Directory Traversal vulnerability

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

Vulnerability ID: GHSA-43fw-536j-w37j
Aliases: CVE-2023-45278
Published: 2023-10-19 18:30:30
CWE: CWE-22
Severity rating: CRITICAL
CVSS: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected packages:
package: ecosystem: Maven
name: org.yamcs:yamcs