An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
- https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
- https://github.com/ANG13T/aerospace-cve-list