Lastyard Last Yard — known CVE vulnerabilities

Every CVE whose affected-product data names Lastyard Last Yard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-47714 — CVSS 9.8 (critical): Last Yard 22.09.8-1 does not enforce HSTS headers
• CVE-2022-47717 — CVSS 7.5 (high): Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).
• CVE-2022-47715 — CVSS 5.3 (medium): In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.