yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HYourls
APPYourls≤ 1.8.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2019-14537CRITICAL9.8ten sam produkt
YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in logi...
CVE-2022-0088HIGH7.4ten sam produkt
Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
CVE-2021-3783MEDIUM6.1ten sam produkt
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3785MEDIUM5.4ten sam produkt
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-27388MEDIUM5.4ten sam produkt
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7...