CVE-2022-4695

CVE-2022-4695 affects usememos/memos prior to version 0.9.0. The issue is described as a Stored Cross-site Scripting (XSS) vulnerability arising from how user input is handled and stored (e.g., when creating a post) and later displayed. Documented impact is XSS with potential interaction required...

CVE-2022-4684

CVE-2022-4684 describes an improper access control vulnerability in the GitHub repository for usememos/memos prior to version 0.9.0. The issue impacts the project’s access boundaries, allowing potential unauthorized access as indicated by the CVE description and corroborating sources. Public refe...

CVE-2022-4688

CVE-2022-4688 affects usememos/memos; versions prior to 0.9.0 are vulnerable to improper authorization. The issue can allow a user to modify other users’ nicknames, usernames, and emails without permission. No exploit details are provided in the sources beyond the general description. Mitigation:...

CVE-2022-4694

CVE-2022-4694 is a stored cross-site scripting vulnerability in the open-source memo app usememos/memos, affecting versions prior to 0.9.0. The issue arises from unvalidated input being stored and then rendered to other users, enabling script execution in victims’ browsers. Reported as XSS with p...

CVE-2022-4687: Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4686: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4692: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4690: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4691

CVE-2022-4691 affects usememos/memos prior to 0.9.0. The vulnerability is a stored Cross-site Scripting (XSS) issue in the application’s handling of user input (notably tied to content uploaded/ displayed by the app), allowing injected scripts to run in a victim’s browser. Root cause: input is st...

PT-2022-28006 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4684 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4689 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.0, which stems from stored cross-site scripting XSS...

PT-2022-27993 · Fortinet · Fortigate

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to improper access control in the usememos/memos GitHub repository. There have been real-world incidents where this issue was exploited, including a leak of data from ov...

CVE-2022-4688: Improper Authorization

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4684: Improper Access Control

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.9.0, which stems from its Resource component that allows an attacker to upload a malicious svg file to enable cross-site scripting...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.0, which stems from incorrect authorization...

memos 访问控制错误漏洞

memos is an open source hosted memo center with knowledge management and social features. An Access Control Error vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect access control...