An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-45281.json"