CVE-2021-3734mediumCWE-1021

CVE-2021-3734: medium-severity vulnerability in yourls/yourls

Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
exploitation probability
0.4%top 67% of all CVEs
observed exploitation
nono source reports it
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
yourls · yourls/yourls
Related CVEs — yourls/yourls

In the same product, most dangerous first.

CVE-2022-0088LOWCross-Site Request Forgery (CSRF) in yourls/yourlsEPSS 2.0%CVE-2021-3785HIGHCross-site Scripting (XSS) - Stored in yourls/yourlsEPSS 0.7%CVE-2021-3783MEDIUMCross-site Scripting (XSS) - Reflected in yourls/yourlsEPSS 0.7%
References
https://github.com/yourls/yourls/commit/0a70acdcfb5fcbc63dbc5750018d608288eba3fehttps://huntr.dev/bounties/dd2e2dbe-efe5-49ec-be11-7a7e7c41debd