Vulnerabilities

TI-2022-23691 CVE-2022-47717 · GHSA-5qww-r3f5-w3w9

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

MEDIUM 40

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00735 Published 2023-02-01 No fix listed CWE-942

TI-2022-23690 CVE-2022-47715 · GHSA-735h-4cvm-7r7f

MEDIUM 63

In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00394 Published 2023-02-01 No fix listed CWE-311

TI-2022-23689 CVE-2022-47714 · GHSA-g4j9-pmf2-prrv

MEDIUM 50

Last Yard 22.09.8-1 does not enforce HSTS headers

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2023-02-01 No fix listed CWE-319