CyberRota Analysis
AI-GeneratedYamcs prior to version 5.11.13 contains a vulnerability in the StaticFileHandler that allows unauthenticated users to exploit path traversal, potentially accessing arbitrary files outside the intended web root. This can lead to the disclosure of sensitive operating system and application data. Organizations using affected versions of Yamcs should prioritize upgrading to at least version 5.11.13 or 5.12.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Yamcs is a mission control framework. Prior to 5.11.13, Yamcs StaticFileHandler.locateFile resolves an unauthenticated request path without using Path.normalize and Path.toAbsolutePath to confirm that the absolute path remains within the configured staticRoots. A path containing traversal segments can escape the intended web root and return an arbitrary readable host file. The flaw is in yamcs-core/src/main/java/org/yamcs/http/StaticFileHandler.java and can disclose sensitive operating-system and application data. This issue is fixed in version 5.11.13, and the 5.12 line is fixed from version 5.12.0.