CVE-2021-3783: Cross-site Scripting (XSS) - Reflected in yourls/yourls
Published Sep 15, 2021
·Updated
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Software
1 affected component
Yourls Yourls<=1.8.2
Remediation
Event History
Sep 15, 2021
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-3783?
CVE-2021-3783 refers to a vulnerability in yourls which allows for 'Cross-site Scripting' attacks.
2
How severe is CVE-2021-3783?
CVE-2021-3783 has a severity rating of 6.1 (medium).
3
How can I fix CVE-2021-3783?
To fix CVE-2021-3783, update yourls to version 1.8.3 or later.
4
What is the Common Weakness Enumeration (CWE) for CVE-2021-3783?
The CWE for CVE-2021-3783 is CWE-79 (Improper Neutralization of Input During Web Page Generation).
5
Where can I find more information about CVE-2021-3783?
More information about CVE-2021-3783 can be found at the following references: - GitHub commit: https://github.com/yourls/yourls/commit/94f6bab91182142c96ff11f481585b445449efd4 - huntr.dev bounty: https://huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984