Lucene search
+L

5 matches found

VulnCheck KEV
VulnCheck KEV
•added 2025/09/26 12:00 a.m.•25 views

VulnCheck KEV: CVE-2024-29028

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

5.8CVSS6.1AI score0.01049EPSS
SaveIn wildExploits1References2
Github Security Blog
Github Security Blog
•added 2024/08/05 9:29 p.m.•40 views

memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

5.8CVSS6.1AI score0.01049EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/04/19 3:14 p.m.•52 views

CVE-2024-29028 memos vulnerable to an SSRF in /o/get/httpmeta

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

5.8CVSS5.7AI score0.01049EPSS
SaveExploits1References2
Mend
Mend
•added 2024/04/19 3:14 p.m.•11 views

CVE-2024-29028

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

6.9CVSS6.1AI score0.01049EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/19 12:00 a.m.•3 views

CVE-2024-29028: Server-Side Request Forgery (SSRF)

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

5.8CVSS6.1AI score0.01049EPSS
SaveExploits1References2
Rows per page
Query Builder