699 matches found
Insecure Direct Object References(IDOR)
github.com/usememos/memos is vulnerable to insecure direct object references. Improper Authorization due to insecure direct object references allow an attacker to trigger the Reset API on user's behalf...
Information Disclosure
github.com/usememos/memos is vulnerable to information disclosure. A remote authenticated attacker is able to view any content from private memos from other users via the API...
Improper Access Control
github.com/usememos/memos is vulnerable to improper access control. Authorization bypass allows a user to archive another user's memospublic / private by changing the post id...
Insecure Direct Object References(IDOR)
github.com/usememos/memos is vulnerable to insecure direct object references. The vulnerability allows an attacker to delete all the available memos Public/Private in the entire application since the memos id is numeric & is sequentially incremented which is easy to guess and perform the attack...
usememos/memos vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4866
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
memos 跨站脚本漏洞
memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.1, which stems from stored cross-site scripting XSS...
CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4865
The CVE-2022-4865 entry concerns a Cross-site Scripting (XSS) vulnerability stored in the GitHub repository usememos/memos prior to version 0.9.1. Affected component is the memos web application; the underlying issue is stored XSS. In the connected documents, the vulnerability is consistently des...
memos 跨站脚本漏洞
memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.1, which stems from stored cross-site scripting XSS...
CVE-2022-4866
The CVE-2022-4866 entry concerns the open-source project usememos/memos, where a Stored Cross-site Scripting (XSS) vulnerability affects versions prior to 0.9.1. The vulnerability is described as XSS stored in the application (no specific exploit vector details provided in the documents). Support...
CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
GHSA-6WHJ-8G9G-5JVX usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...
Cross-site Request Forgery (CSRF)
github.com/usememos/memos is vulnerable to cross site request forgery. The vulnerability exists in the NewServer function in server.go, which allows an attacker to manipulate the actions of authenticated users by tricking them into clicking on a malicious link or visiting a malicious website whil...
memos 安全漏洞
memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.9.1, which stems from insufficient privileges or improper handling of privileges...
PT-2022-28148 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of insufficient permissions or privileges. There is no information provided about the estimated number of potentially affected devices worldwide or...