Junglewise Threat Intelligence

Yapscan's report receiver server vulnerable to path traversal and log injection

Severity: low · CVSS 3.1 · Published 2022-12-29

Technologies: github.com/fkie-cad/yapscan (Go). Vendors: Go.

Executive brief

Yapscan's report receiver server vulnerable to path traversal and log injection

Affected products

Go github.com/fkie-cad/yapscan

Related threats

GO-2022-1204 - Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan
GO-2023-1607 - Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan
Yapscan Denial of Service vulnerability in report server