Yamcs <=5.8.6 - Cross-Site Scripting
Yamcs < 5.9.4 contains a stored XSS caused by inadequate HTML escaping of attacker-controlled redirect_uri parameter in authorization template, letting attackers execute JavaScript to steal authentication data, exploit requires user to open crafted URL.
PoC 已收录Yamcs
CVSS6.5EPSS 1.3%