CVE-2022-0088CWE-352

Cross-Site Request Forgery (CSRF) in yourls/yourls

Low · published April 3, 2022

CVSS v3.0
3.5
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01994 · 80.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-04-03T08:50Z
EPSS history
Timeline
  • 03 APR 08:50Z
    Cross-Site Request Forgery (CSRF) in yourls/yourls
    cvelistv5