Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16019 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an attack...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.10.0, which stems from the fact that its markup editor does not clean up user input allowing an attacker to implement stored...

CVE-2023-0108

CVE-2023-0108 is a stored cross-site scripting (XSS) vulnerability in the open-source memos project (usememos/memos) prior to version 0.10.0. Multiple connected sources confirm stored XSS in GitHub repository code, including reports tying the issue to the Resources module and the ability for atta...

CVE-2023-0112

CVE-2023-0112 is an XSS vulnerability affecting usememos/memos before version 0.10.0. The issue is a Stored XSS in the GitHub repository where user input can be stored and later rendered. Documents confirm affected software, vulnerable component/file (the memos codebase prior to 0.10.0), and the ...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.10.0, which stems from a vulnerability in its Resources module that allows an attacker to implement cross-site scripting by uploadi...

CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.10.0, which stems from the fact that it allows an attacker to bypass csp configuration by calling an attacker-uploaded js file from...

memos 跨站脚本漏洞

memos is an open source hosted memos center with knowledge management and social features. Versions of memos prior to 0.10.0 suffer from a cross-site scripting vulnerability that stems from the fact that its resource upload feature does not restrict the type of file that can be uploaded leading t...

CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16016 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository usememos/memos. This type of attack allows an attacker to inject malicious scripts into a...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from its csp being too simple to allow an attacker to bypass. No detailed vulnerability details are available at this time...

CVE-2023-0108 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110

CVE-2023-0110 is a stored XSS vulnerability in usememos/memos prior to 0.10.0. The issue is described across multiple sources as a stored XSS in the web app, with some references noting that the root cause relates to CSP being too permissive or not sufficiently restrictive. The affected component...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

PT-2023-16017 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to stored Cross-site Scripting XSS in the GitHub repository usememos/memos. This type of attack involves an attacker injecting malicious scripts into a website, which a...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.10.0 have a cross-site scripting vulnerability that stems from the fact that it allows link tagging without validation, which could be exploited by an attacker to implement cross-si...