PT-2023-29482 · Yamcs · Yamcs

Andy Olchawa + 1 · Published 2023-10-19 · Updated 2023-10-25 · CVE-2023-45279

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Yamcs version 5.8.6

Description The issue allows for Cross-Site Scripting (XSS) attacks. It comes with a Bucket as its primary storage mechanism, which allows for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from the menu and navigating to the display.

Recommendations For Yamcs version 5.8.6, as a temporary workaround, consider disabling the ability to upload displays referencing external files to the bucket until a patch is available. Restrict access to the bucket to minimize the risk of exploitation. Avoid using the bucket's file upload feature in the affected version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-45279

GHSA-4CQV-Q33X-WFXW

Affected Products

Yamcs

References · 9

• 🔥 https://linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies · Exploit
• https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7 · Patch
• https://osv.dev/vulnerability/GHSA-4cqv-q33x-wfxw · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45279 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45279 · Vendor Advisory
• https://github.com/yamcs/yamcs · Note
• https://t.me/cvenotify/59759 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1715165478107197447 · Twitter Post
• https://twitter.com/CVEnew/status/1715123977612324983 · Twitter Post