Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

Mô tả

Tham khảo

• YOURLS/YOURLS security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2019-14537 · ADVISORY
• YOURLS/YOURLS#2542 · WEB
• Wocanilo/CVE-2019-14537 · WEB
• YOURLS/YOURLS · PACKAGE
• YOURLS/YOURLS · WEB
• YOURLS/YOURLS release · WEB
• GitHub Advisory GHSA-vf23-f26f-mjj9 · ADVISORY
• security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling · WEB

Lỗ hổng khác của yourls/yourls

• CVE-2026-62858TRUNG BÌNH 5.3YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without…
• CVE-2026-63135CAO 8.2YOURLS is a self-hosted, customizable URL shortener written in PHP. From 1.5.1 until 1.10.4, YOURLS stores the HTTP Referer header through y…
• GHSA-6mp4-q625-mxjpCAO 7.1YOURLS is vulnerable to XSS through JSONP and Callback request parameters
• CVE-2022-0088CAO 7.4Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
• CVE-2021-3785TRUNG BÌNH 5.4yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')