Cross-site Scripting in yourls

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-3783 · ADVISORY
• yourls/yourls commit 94f6bab · WEB
• yourls/yourls · PACKAGE
• huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984 · WEB

yourls/yourls のその他の脆弱性

• CVE-2026-62858中 5.3YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without…
• CVE-2026-63135高 8.2YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y…
• GHSA-6mp4-q625-mxjp高 7.1YOURLS is vulnerable to XSS through JSONP and Callback request parameters
• CVE-2022-0088高 7.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
• CVE-2021-3785中 5.4yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')