Read the docs
TI-2008-04514 Aliases CVE-2008-4731GHSA-fv85-4x5j-8vfr

Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.

Priority MEDIUM 46Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.

Why it matters now

EPSS 0.01495 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 54

CPEVersionsRoleVendor
cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:*all versions; up to 0.60VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:*0.1_build2004-01-19VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:*0.11_build2004-01-24VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:*0.12_build2004-02-04VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:*0.13_build2004-02-10VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:*0.14_build2004-02-13VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:*0.15_build2004-03-18VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:*0.16_build2004-05-03VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:*0.20_build2004-06-14VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:*0.21_build2004-06-27VulnerableMichael Christen
  • cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:* Versions all versions; up to 0.60 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:* Versions 0.1_build2004-01-19 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:* Versions 0.11_build2004-01-24 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:* Versions 0.12_build2004-02-04 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:* Versions 0.13_build2004-02-10 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:* Versions 0.14_build2004-02-13 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:* Versions 0.15_build2004-03-18 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:* Versions 0.16_build2004-05-03 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:* Versions 0.20_build2004-06-14 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:* Versions 0.21_build2004-06-27 Vulnerable ·Michael Christen
Show 44 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:*0.22_build2004-07-11VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:*0.23_build2004-08-08VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:*0.24_build2004-08-16VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:*0.25_build2004-08-22VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:*0.26_build2004-09-16VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:*0.27_build2004-09-24VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:*0.28_build2004-10-01VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:*0.29_build2004-10-22VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:*0.30_build2004-11-25VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:*0.31_build2004-12-09VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.32:*:*:*:*:*:*:*0.32VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.33:*:*:*:*:*:*:*0.33VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.34:*:*:*:*:*:*:*0.34VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.35:*:*:*:*:*:*:*0.35VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.36:*:*:*:*:*:*:*0.36VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.37:*:*:*:*:*:*:*0.37VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.38:*:*:*:*:*:*:*0.38VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.39:*:*:*:*:*:*:*0.39VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.40:*:*:*:*:*:*:*0.40VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.41:*:*:*:*:*:*:*0.41VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.42:*:*:*:*:*:*:*0.42VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.43:*:*:*:*:*:*:*0.43VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.44:*:*:*:*:*:*:*0.44VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.45:*:*:*:*:*:*:*0.45VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.46:*:*:*:*:*:*:*0.46VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.47:*:*:*:*:*:*:*0.47VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.48:*:*:*:*:*:*:*0.48VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.49:*:*:*:*:*:*:*0.49VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.50:*:*:*:*:*:*:*0.50VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.51:*:*:*:*:*:*:*0.51VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.52:*:*:*:*:*:*:*0.52VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.53:*:*:*:*:*:*:*0.53VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.54:*:*:*:*:*:*:*0.54VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.55:*:*:*:*:*:*:*0.55VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.56:*:*:*:*:*:*:*0.56VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.57:*:*:*:*:*:*:*0.57VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.58:*:*:*:*:*:*:*0.58VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:0.59:*:*:*:*:*:*:*0.59VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:*build2003-12-15VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:*build2003-12-18VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:*build2003-12-29VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:*build2004-01-05VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:*build2004-01-07VulnerableMichael Christen
cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:*build2004-01-10VulnerableMichael Christen
  • cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:* Versions 0.22_build2004-07-11 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:* Versions 0.23_build2004-08-08 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:* Versions 0.24_build2004-08-16 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:* Versions 0.25_build2004-08-22 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:* Versions 0.26_build2004-09-16 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:* Versions 0.27_build2004-09-24 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:* Versions 0.28_build2004-10-01 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:* Versions 0.29_build2004-10-22 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:* Versions 0.30_build2004-11-25 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:* Versions 0.31_build2004-12-09 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.32:*:*:*:*:*:*:* Versions 0.32 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.33:*:*:*:*:*:*:* Versions 0.33 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.34:*:*:*:*:*:*:* Versions 0.34 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.35:*:*:*:*:*:*:* Versions 0.35 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.36:*:*:*:*:*:*:* Versions 0.36 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.37:*:*:*:*:*:*:* Versions 0.37 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.38:*:*:*:*:*:*:* Versions 0.38 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.39:*:*:*:*:*:*:* Versions 0.39 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.40:*:*:*:*:*:*:* Versions 0.40 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.41:*:*:*:*:*:*:* Versions 0.41 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.42:*:*:*:*:*:*:* Versions 0.42 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.43:*:*:*:*:*:*:* Versions 0.43 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.44:*:*:*:*:*:*:* Versions 0.44 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.45:*:*:*:*:*:*:* Versions 0.45 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.46:*:*:*:*:*:*:* Versions 0.46 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.47:*:*:*:*:*:*:* Versions 0.47 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.48:*:*:*:*:*:*:* Versions 0.48 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.49:*:*:*:*:*:*:* Versions 0.49 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.50:*:*:*:*:*:*:* Versions 0.50 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.53:*:*:*:*:*:*:* Versions 0.53 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.54:*:*:*:*:*:*:* Versions 0.54 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.55:*:*:*:*:*:*:* Versions 0.55 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.56:*:*:*:*:*:*:* Versions 0.56 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.57:*:*:*:*:*:*:* Versions 0.57 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.58:*:*:*:*:*:*:* Versions 0.58 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:0.59:*:*:*:*:*:*:* Versions 0.59 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:* Versions build2003-12-15 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:* Versions build2003-12-18 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:* Versions build2003-12-29 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:* Versions build2004-01-05 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:* Versions build2004-01-07 Vulnerable ·Michael Christen
  • cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:* Versions build2004-01-10 Vulnerable ·Michael Christen

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-4731
  2. 2026-10-03 Alias added: GHSA-fv85-4x5j-8vfr

References

  • TI-2004-02521 Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote… CVSS 2.0MEDIUM 4.3

Sources