Lucene search
HistoryDec 28, 2022 - 2:15 p.m.
CVE-2022-4802
cve-2022-4802
authorization bypass
user-controlled key
github repository
usememos/memos
prior to 0.9.1
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
21.8%
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Affected configurations
Node
usememosmemosRange<0.9.1
Related
osv
osv
CVE-2022-4802
2022-12-28 14:15:10
usememos/memos vulnerable to Improper Authorization
2022-12-28 15:30:45
veracode
veracode
Improper Authorization
2023-01-02 10:53:26
cvelist
cvelist
huntr
huntr
IDOR allows to see, update and delete other users shortcuts
2022-12-26 08:45:20
github
github
usememos/memos vulnerable to Improper Authorization
2022-12-28 15:30:45
cve
cve
CVE-2022-4802
2022-12-28 14:15:10
prion
prion
Authorization
2022-12-28 14:15:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
21.8%
Related for NVD:CVE-2022-4802