CVE-2019-14537

CVE-2019-14537

EPSS 6.1%

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Wocanilo/CVE-2019-14537 https://github.com/YOURLS/YOURLS/commits/master https://github.com/YOURLS/YOURLS/pull/2542 https://github.com/YOURLS/YOURLS/releases https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling