critical9.8
CVE-2019-14537
YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.
Impact
YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yourls | Yourls | through 1.7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Wocanilo/CVE-2019-14537
- https://github.com/YOURLS/YOURLS/commits/master
- https://github.com/YOURLS/YOURLS/pull/2542
- https://github.com/YOURLS/YOURLS/releases
- https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling
- https://github.com/Wocanilo/CVE-2019-14537
- https://github.com/YOURLS/YOURLS/commits/master
- https://github.com/YOURLS/YOURLS/pull/2542
- https://github.com/YOURLS/YOURLS/releases
- https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling