Lucene search
GoogleOSV:GHSA-R3P3-5F35-H6MFHistoryDec 28, 2022 - 3:30 p.m.
usememos/memos Improper Privilege Management vulnerability
2022-12-2815:30:46
Google
osv.dev
7
github repository
improper privilege management
usememos/memos
software vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
34.8%
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/usememos/memos | lt | 0.9.1 |
Related
prion
prion
Input validation
2022-12-28 14:15:00
osv
osv
CVE-2022-4808
2022-12-28 14:15:11
veracode
veracode
Privilege Escalation
2023-01-02 13:37:01
cvelist
cvelist
CVE-2022-4808 Improper Privilege Management in usememos/memos
2022-12-28 00:00:00
huntr
huntr
Able to assign HOST role to new User
2022-12-27 19:16:30
cve
cve
CVE-2022-4808
2022-12-28 14:15:11
nvd
nvd
CVE-2022-4808
2022-12-28 14:15:11
github
github
usememos/memos Improper Privilege Management vulnerability
2022-12-28 15:30:46
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
34.8%
Related for OSV:GHSA-R3P3-5F35-H6MF