Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-4814
HistoryDec 28, 2022 - 12:00 a.m.

CVE-2022-4814 Improper Access Control in usememos/memos

2022-12-2800:00:00
CWE-284
@huntrdev
www.cve.org
cve-2022-4814
github
repository
usememos/memos
prior to 0.9.1

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

CNA Affected

[
  {
    "vendor": "usememos",
    "product": "usememos/memos",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.9.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.3%

Related for CVELIST:CVE-2022-4814