Lucene search

K
osvGoogleOSV:GHSA-RX2M-XR4X-54HH
HistoryDec 28, 2022 - 3:30 p.m.

usememos/memos vulnerable to Improper Authorization

2022-12-2815:30:45
Google
osv.dev
7
usememos/memos software security vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

21.8%

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization.

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

21.8%

Related for OSV:GHSA-RX2M-XR4X-54HH