Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-45277. PoCs published by shoucheng3.
AI-analyzed exploit summary The repository appears to be a fork or clone of the Yamcs project with no specific exploit code or technical details related to CVE-2023-45277. It contains standard project files (CI workflows, documentation, build scripts) but lacks any PoC, exploit, or analysis for the CVE.
Description
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.
Exploits (1)
The repository appears to be a fork or clone of the Yamcs project with no specific exploit code or technical details related to CVE-2023-45277. It contains standard project files (CI workflows, documentation, build scripts) but lacks any PoC, exploit, or analysis for the CVE.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N