Description
YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.
Remediation
References
Related Vulnerabilities
Jboss EAP Incorrect Authorization Vulnerability (CVE-2022-0866)
WordPress Plugin WordPoints Multiple Vulnerabilities (1.10.2)
WordPress Plugin Codestyling Localization 'name' Parameter Cross-Site Scripting (1.99.19)
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-30156)