CVE-2022-4840

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CSRF allows attacker trigger admin add HOST user lead to takeover memos application

Description This vuln allow attacker trigger admin submitting a malicious request to create new user with any role. Proof of Concept 1. Attacker create malicious script with csrf payload and upload it to attacker server httpx://attacker.server/csrf.html 2. Attacker send this link to memos admin 3...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28131 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks a user into performing unintended actions on a web application...

PT-2022-28139 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper handling of values in the GitHub repository usememos/memos. An attacker can post malicious content to another user's memos page via a POST request...

CVE-2022-4848 Improper Verification of Source of a Communication Channel in usememos/memos

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4848 Improper Verification of Source of a Communication Channel in usememos/memos

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4841

CVE-2022-4841 is a stored Cross-site Scripting (XSS) vulnerability in the open-source project usememos/memos, present in versions prior to 0.9.1. The public descriptions consistently state that user input stored by the application could be reflected in later displays, enabling XSS. The available ...

CVE-2022-4844

CVE-2022-4844 affects usememos/memos prior to 0.9.1. A CSRF vulnerability exists in the web app that could allow an attacker to induce authenticated actions (e.g., creating a HOST user) without user consent. Exploitation details are provided in Huntr’s PoC and related advisories, with remediation...

CVE-2022-4845

CVE-2022-4845 affects the usememos/memos project prior to version 0.9.1, with a Cross-Site Request Forgery (CSRF) vulnerability reported. The issue arises from CSRF in the web application, enabling unauthorized actions if a user is lured to a malicious site while authenticated. Affected software ...

CVE-2022-4846

CVE-2022-4846 concerns Cross-Site Request Forgery (CSRF) in the open-source memo platform usememos/memos, with affected versions prior to 0.9.1. Multiple connected sources confirm the vulnerability in this GitHub-hosted project and reference similar advisories (GHSA, CNVD/CNNVD, OSV) describing C...

CVE-2022-4851

The CVE-2022-4851 entry refers to usememos/memos prior to version 0.9.1, with the root cause described as improper handling of values. The vulnerability allows an attacker to post malicious content to another user’s memos page via a POST request. Public details across connected documents confirm ...

CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28132 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks the victim into performing unintended actions on a web...

CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4840 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28133 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. CSRF is an attack that tricks a user into performing unintended actions on a web application...