Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-4801
HistoryDec 28, 2022 - 12:00 a.m.

CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos

2022-12-2800:00:00
CWE-1220
@huntrdev
www.cve.org
2
cve-2022-4801
insufficient granularity
github repository

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS

0.001

Percentile

30.4%

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

CNA Affected

[
  {
    "vendor": "usememos",
    "product": "usememos/memos",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.9.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

EPSS

0.001

Percentile

30.4%

Related for CVELIST:CVE-2022-4801