Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

Improper access control

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

Code injection

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

Improper access control

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

Code injection

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4798 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4805

CVE-2022-4805 affects usememos/memos prior to 0.9.1. The root cause is incorrect use of privileged APIs, enabling a user to archive private memos, delete any shortcut, and edit shortcuts from other users via the API. Impact is unauthorized modification/access of sensitive data as described across...

CVE-2022-4803 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4799 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4806 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4807 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4808 Improper Privilege Management in usememos/memos

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4810 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...