CVE-2022-0088

Cross-Site Request Forgery (CSRF) in yourls/yourls

CVSS 3.5 LOWEPSS 2.0%CWE-352

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Affected products

yourls · yourls/yourls

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/52446unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-0088.md https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59 https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29