usememos/memos vulnerable to stored Cross-site Scripting

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

GHSA-642Q-2Q68-9J3P usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

GHSA-5JQP-WMHJ-G33F usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

GHSA-GW9M-2M5V-C6X5 usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

GHSA-CWRM-33QQ-4W2X usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

CVE-2022-4845

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4844

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4850

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4849

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

Bypassing filters to trigger XSS while creating memos

Description Stored cross-site scripting also known as second-order or persistent XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. Payload: " Proof of Concept 1 Go to https://demo.usememos.com/ and login...

CVE-2022-4841

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4839

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4840

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CSRF allows attacker trigger admin add HOST user lead to takeover memos application

Description This vuln allow attacker trigger admin submitting a malicious request to create new user with any role. Proof of Concept 1. Attacker create malicious script with csrf payload and upload it to attacker server httpx://attacker.server/csrf.html 2. Attacker send this link to memos admin 3...