GitHub Advisoryadvisory · Packagist

GHSA-r6g8-jmj9-g945 Improper Restriction of Rendered UI Layers or Frames in yourls

MEDIUM Published 2021-08-30 Modified 2021-08-27 Official page ↗

Aliases: CVE-2021-3734
Ecosystem: Packagist
Packages: yourls/yourls
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses: CWE-1021, CWE-352
Reviewed: 2021-08-27

Affected packages

• Packagist yourls/yourls: <= 1.8.1 (no fix yet)

Description

yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames

Related

Alias · CVE (1)

CVE-2021-3734 yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames vulnerability

Weakness · CWE (2)

CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
CWE-352 Cross-Site Request Forgery weakness

References