CVE-2019-14537
1 advisory.
Packagist/yourls/yourls CVE-2019-14537: critical 9.8, EPSS 6.14%
Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls
Action: Upgrade yourls/yourls to 1.7.4 or later.
composer require yourls/yourls:1.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.4 | - |
Fixed versions
| 1.7.4 |
Sources
- osv: GHSA-vf23-f26f-mjj9
- https://github.com/YOURLS/YOURLS/security/advisories/GHSA-vf23-f26f-mjj9
- https://nvd.nist.gov/vuln/detail/CVE-2019-14537
- https://github.com/YOURLS/YOURLS/pull/2542
- https://github.com/Wocanilo/CVE-2019-14537
- https://github.com/YOURLS/YOURLS
- https://github.com/YOURLS/YOURLS/commits/master
- https://github.com/YOURLS/YOURLS/releases
- https://github.com/advisories/GHSA-vf23-f26f-mjj9
- https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling
CVE-2019-14537 · published · modified · JSON