CVE-2022-4844

🗓️ 29 Dec 2022 18:10:15Reported by [email protected]Type

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Veracode	Cross-Site Request Forgery (CSRF)	3 Jan 202307:17	–	veracode
Cvelist	CVE-2022-4844 Cross-Site Request Forgery (CSRF) in usememos/memos	29 Dec 202200:00	–	cvelist
OSV	CVE-2022-4844	29 Dec 202218:15	–	osv
OSV	GHSA-5JQP-WMHJ-G33F usememos/memos Cross-Site Request Forgery vulnerability	29 Dec 202218:30	–	osv
Huntr	CSRF allows attacker trigger admin add HOST user lead to takeover memos application	29 Dec 202209:18	–	huntr
Vulnrichment	CVE-2022-4844 Cross-Site Request Forgery (CSRF) in usememos/memos	29 Dec 202200:00	–	vulnrichment
Github Security Blog	usememos/memos Cross-Site Request Forgery vulnerability	29 Dec 202218:30	–	github
Prion	Cross site request forgery (csrf)	29 Dec 202218:15	–	prion
CVE	CVE-2022-4844	29 Dec 202218:15	–	cve

Nvd

Node

usememos memosRange<0.9.1

Source	Link
huntr	www.huntr.dev/bounties/8e8df1f4-07ab-4b75-aec8-75b1229e93a3
github	www.github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Dec 2022 18:15Current

CVSS38.8

EPSS0.00068

CWE-352