CVE-2022-0088 EXPLOIT
7.4
HIGH · CVSS 3.1 · EPSS 2% (pctl 80)
Patch early
A public exploit exists.
Description
Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.
Scoring
| CVSS | 7.4 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N |
| EPSS | 1.99% — more likely to be exploited than 80% of all CVEs |
| Weakness | CWE-352 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2022-04-03 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| yourls | yourls |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF) | 2025-12-02 |
References
- https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59
- https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-0088.md
- https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59
- https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29
→ the Explorer · watch your stack · NVD