CVE-2023-45277

Summary

CVE-2023-45277 is a directory traversal vulnerability affecting version 5.8.6 of Yamcs. This issue lies in the API's storage functionality and allows attackers to bypass the base directory of the buckets, gaining the ability to navigate through system directories and read arbitrary files. This vulnerability poses a significant risk as it can lead to unauthorized access and potential data leakage. System administrators are strongly advised to update Yamcs to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.