PT-2022-12972 · Yourls · Yourls

Ozh · CVE-2022-0088 · Published 2022-04-03 · Updated 2026-02-16

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions YOURLS versions prior to 1.8.3

Description The issue is related to Cross-Site Request Forgery (CSRF) in the YOURLS repository. This allows an attacker to perform unintended actions on a user's account.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-0088

GHSA-GX7G-WJXG-JWWJ

Affected Products

Yourls

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0088.json · Exploit
• 🔥 https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-0088.md · Exploit
• 🔥 https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29 · Exploit
• 🔥 https://exploit-db.com/exploits/52446 · Exploit
• https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0088 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0088 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gx7g-wjxg-jwwj · Vendor Advisory
• https://github.com/YOURLS/YOURLS/pull/3264 · Note
• https://github.com/yourls/yourls · Note
• https://github.com/YOURLS/YOURLS/issues/3170 · Note
• https://t.me/cveNotify/152117 · Telegram Post