Last Yard
by Lastyard
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-47714 | Cri | 0.64 | 9.8 | 0.01 | Feb 1, 2023 | Last Yard 22.09.8-1 does not enforce HSTS headers | ||
| CVE-2022-47717 | Hig | 0.49 | 7.5 | 0.01 | Feb 1, 2023 | Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS). | ||
| CVE-2022-47715 | Med | 0.34 | 5.3 | 0.00 | Feb 1, 2023 | In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic. |
- risk 0.64cvss 9.8epss 0.01
Last Yard 22.09.8-1 does not enforce HSTS headers
- risk 0.49cvss 7.5epss 0.01
Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).
- risk 0.34cvss 5.3epss 0.00
In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.