Lastyard

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lastyard records in CISA KEV

No Lastyard vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-23690 CVE-2022-47715 · GHSA-735h-4cvm-7r7f

MEDIUM 63

In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00394 Published 2023-02-01 No fix listed CWE-311

TI-2022-23689 CVE-2022-47714 · GHSA-g4j9-pmf2-prrv

MEDIUM 50

Last Yard 22.09.8-1 does not enforce HSTS headers

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2023-02-01 No fix listed CWE-319

TI-2022-23691 CVE-2022-47717 · GHSA-5qww-r3f5-w3w9

MEDIUM 40

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00735 Published 2023-02-01 No fix listed CWE-942