CyberRota Analysis
AI-GeneratedYamcs versions prior to 5.12.8 and 5.13.2 are vulnerable to a cross-site scripting (XSS) attack due to improper handling of attacker-controlled data from the /ext URL route, allowing malicious JavaScript execution upon user interaction. This vulnerability can lead to unauthorized data access and actions performed in the context of the affected user. Organizations utilizing Yamcs for mission control should prioritize updating to the patched versions to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin IDs before DOM rendering through innerHTML. A crafted URL can execute JavaScript when opened by a user. The script can read data available to the Yamcs web application and perform actions in the user context. This issue is fixed in versions 5.12.8 and 5.13.2.