Description
Last Yard 22.09.8-1 does not enforce HSTS headers
References
https://github.com/l00neyhacker/CVE-2022-47714
ExploitThird Party Advisory
https://github.com/l00neyhacker/CVE-2022-47714
ExploitThird Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 · Critical
Information
Source identifier
Vulnerability status
Modified
Published
2023-02-01T13:15:08.980Z
3 years agoLast modified
2025-03-27T14:15:39.287Z
1 year ago