The forgotten sibling: unauthenticated RCE in Yamcs mission control
Yamcs patched a YAML template injection but left its twin — the reconfigure path — on the old unsafe renderer. One unauthenticated request runs a shell command on mission control.
Yamcs patched a YAML template injection but left its twin — the reconfigure path — on the old unsafe renderer. One unauthenticated request runs a shell command on mission control.