high7.4Public exploit code
CVE-2022-0088
Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)2025-12-02 · webapps · multiple
Impact
Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yourls | Yourls | before 1.8.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59
- https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-0088.md
- https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59
- https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29