Lucene search

K
osvGoogleOSV:GO-2024-3046
HistoryAug 06, 2024 - 10:40 p.m.

memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

2024-08-0622:40:50
Google
osv.dev
8
memos vulnerability
server-side request forgery
github.com/usememos/memos
software

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

7.1

Confidence

Low

memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

CVSS3

5.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

AI Score

7.1

Confidence

Low