CVE-2019-14537

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

• CWE-843

• https://github.com/Wocanilo/CVE-2019-14537Exploit, Third Party Advisory
• https://github.com/YOURLS/YOURLS/commits/masterPatch, Third Party Advisory
• https://github.com/YOURLS/YOURLS/pull/2542Patch, Third Party Advisory
• https://github.com/YOURLS/YOURLS/releasesRelease Notes, Third Party Advisory
• https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-jugglingExploit, Third Party Advisory
• https://github.com/Wocanilo/CVE-2019-14537Exploit, Third Party Advisory
• https://github.com/YOURLS/YOURLS/commits/masterPatch, Third Party Advisory
• https://github.com/YOURLS/YOURLS/pull/2542Patch, Third Party Advisory
• https://github.com/YOURLS/YOURLS/releasesRelease Notes, Third Party Advisory
• https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-jugglingExploit, Third Party Advisory

Published

Aug 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14530An issue was discovered in custom/ajax_download.php in OpenE…8.8
• CVE-2019-14531An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There…
• CVE-2019-14532An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There…9.8
• CVE-2019-14533The Control function of demux/asf/asf.c in VideoLAN VLC medi…
• CVE-2019-14534In VideoLAN VLC media player 3.0.7.1, there is a NULL pointe…
• CVE-2019-14535A divide-by-zero error exists in the SeekIndex function of d…
• CVE-2019-1454An elevation of privilege vulnerability exists when the Wind…5.5
• CVE-2019-14540A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-14541GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_…
• CVE-2019-14544routes/api/v1/api.go in Gogs 0.11.86 lacks permission checks…
• CVE-2019-14546An issue was discovered in EspoCRM before 5.6.9. Stored XSS …
• CVE-2019-14547An issue was discovered in EspoCRM before 5.6.9. Stored XSS …