CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

memos 跨站请求伪造漏洞

memos is an open source hosted meme center with knowledge management and social features. A cross-site request forgery vulnerability exists in memos versions prior to 0.9.1. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

memos 跨站请求伪造漏洞

memos is an open source hosted meme center with knowledge management and social features. memos suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to post on behalf of victims...

memos 跨站脚本漏洞

memos is an open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.9.1. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos, which can be exploited by an attacker to add shortcuts to a victim's account...

CVE-2022-4840

CVE-2022-4840 : A stored Cross-site Scripting (XSS) vulnerability exists in the GitHub project usememos/memos for versions prior to 0.9.1. The issue is triggered when untrusted user input is included in outputs without proper validation, enabling script injection. The Red Hat/OSV/PT-Security/GHSA...

CVE-2022-4841

CVE-2022-4841 is a stored Cross-site Scripting (XSS) vulnerability in the open-source project usememos/memos, present in versions prior to 0.9.1. The public descriptions consistently state that user input stored by the application could be reflected in later displays, enabling XSS. The available ...

CVE-2022-4839

CVE-2022-4839 is a stored Cross-site Scripting (XSS) vulnerability in the open-source project usememos/memos , affecting versions prior to 0.9.1. The issue allows injected scripts to run in a victim’s browser when interacting with the affected memos UI. Reported CVSS vectors indicate a MEDIUM (NV...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28132 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks the victim into performing unintended actions on a web...

CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4839 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4840 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

memos 跨站请求伪造漏洞

memos is an open source hosted memo center with knowledge management and social features. memos suffers from a cross-site request spoofing vulnerability, which can be exploited by attackers to manipulate the behavior of authenticated users by tricking them into clicking on malicious links or...

PT-2022-28139 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of values in the GitHub repository usememos/memos. An attacker can post malicious content to another user's memos page via a POST request...