HIGH🇬🇧 English

CVE-2022-0088

CVSS 7.4v3.1pub. 2022-04-03upd. 2026-02-16

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

  • Yourls

    APP
    Yourls
    < 1.8.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-14537CRITICAL9.8ten sam produkt

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in logi...

CVE-2021-3734HIGH8.8ten sam produkt

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

CVE-2021-3785MEDIUM5.4ten sam produkt

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-3783MEDIUM6.1ten sam produkt

yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-27388MEDIUM5.4ten sam produkt

Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7...