Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

KRITISCH 9.8CVE-2019-14537 · GHSA-vf23-f26f-mjj9 · Published 07/08/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-14537 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in yourls/yourls, yourls (yourls).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.1%, höher als bei 93.5% aller Schwachstellen.
Abhilfe: auf 1.7.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
yourls/yourls Packagist	`< 1.7.4`	`1.7.4`
yourls yourls	`≤ 1.7.3`	No fix yet

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the API component that can result in login bypass.

If you have any questions or comments about this advisory:

NVD description

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.7.4

1.7.4

≤ 1.7.3

No fix yet

Description

NVD description

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

Weitere Schwachstellen in yourls/yourls

Alle anzeigen →