889 matches found
CVE-2022-4810 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4810
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4804 Improper Authorization in usememos/memos
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28112 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue allows an unauthorized user to access any private memo by manipulating the URL of a memo on the editing screen. This is due to an Authorization Bypass Through User-Controlled Key...
Memo authorization issue vulnerabilities
memos is an open source hosted meme center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to gain access to all private memos...
CVE-2022-4811
The CVE-2022-4811 vulnerability concerns usememos/memos. It is an Authorization Bypass Through User-Controlled Key that allows an unauthorized user to access private memos by manipulating the URL. This affects versions prior to 0.9.1. The issue is documented across multiple sources (including Red...
CVE-2022-4811 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4811
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4811 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4806: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4800: Improper Verification of Source of a Communication Channel
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4810
The CVE-2022-4810 case concerns usememos/memos prior to version 0.9.1 with an improper access control flaw exposed via the API, allowing a user to view private memos from other users. Root cause: insufficient authorization checks on private memo access. Impact: confidentiality of private memo con...
CVE-2022-4814
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4803
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4809
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4805
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802
The CVE-2022-4802 entry covers usememos/memos prior to 0.9.1, where an Authorization Bypass Through a User-Controlled Key is reported. Multiple connected sources describe it as Improper Authorization/IDOR-like behavior that could allow bypassing access controls to view, update, or delete shortcut...
CVE-2022-4814
CVE-2022-4814 affects usememos/memos prior to 0.9.1. Multiple connected sources describe an improper access control vulnerability (IDOR) that can allow archiving another user’s memo. The core issue is an authorization flaw in how memos handles memo access, enabling unauthorized archival actions. ...