Space Applications Yamcs 5.8.6
Approved changes feed: RSS · Atom
cpe:2.3:a:spaceapplications:yamcs:5.8.6:*:*:*:*:*:*:*part: a version: 5.8.6 update: *
| Vendor | Spaceapplications (bae17897-416d-5991-a8a7-8fc8e6e47183) |
|---|---|
| Product | Yamcs (b3f13eea-4a42-55bf-9228-57b487ed8f58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/yamcs/yamcs |
purl2cpe | 2026-06-01 10:12:40.705486 |
pkg:maven/org.yamcs/yamcs |
purl2cpe | 2026-06-01 10:12:40.705490 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45281 |
vulnerable | 2026-06-08 06:12:42.439819 |
Details available
An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-08-02T20:21:15.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45280 |
vulnerable | 2026-06-08 06:12:42.439509 |
Details available
Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary JavaScript and then navigate to it. Once the user opens the file, the browser will execute the arbitrary JavaScript.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-08-02T20:21:15.249Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45279 |
vulnerable | 2026-06-08 06:12:42.439087 |
Details available
Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from the menu and navigating to the display.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-08-02T20:21:15.302Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45278 |
vulnerable | 2026-06-08 06:12:42.438772 |
Details available
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-08-02T20:21:15.202Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45277 |
vulnerable | 2026-06-08 06:12:42.438308 |
Details available
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-08-02T20:14:19.891Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.