Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

CRITICO 9.8CVE-2019-14537 · GHSA-vf23-f26f-mjj9 · Published 07/08/2019 · updated 17/06/2026

In breve

CVE-2019-14537 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda yourls/yourls, yourls (yourls).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.1%, superiore al 93.5% delle vulnerabilità.
Correzione: aggiornare a 1.7.4 o successiva.

Package	Affected versions	Patched versions
yourls/yourls Packagist	`< 1.7.4`	`1.7.4`
yourls yourls	`≤ 1.7.3`	No fix yet

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the API component that can result in login bypass.

If you have any questions or comments about this advisory:

NVD description

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.7.4

1.7.4

≤ 1.7.3

No fix yet

Description

NVD description

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

Altre vulnerabilità di yourls/yourls

Vedi tutto →