PT-2022-27995 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to an Authorization Bypass Through User-Controlled Key and Improper Authentication in the usememos/memos GitHub repository. Recommendations: For versions prior to 0.9.0,...

CVE-2022-4684

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4684

CVE-2022-4684 describes an improper access control vulnerability in the GitHub repository for usememos/memos prior to version 0.9.0. The issue impacts the project’s access boundaries, allowing potential unauthorized access as indicated by the CVE description and corroborating sources. Public refe...

CVE-2022-4691: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4688: Improper Authorization

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

Cross-site Scripting (XSS)

github.com/usememos/memos is vulnerable to cross-site scripting. The vulnerability exists in the registerResourceRoutes function in resource.go because memos allow users to upload a file and make it public to others which may allow an attacker to gain access to potentially sensitive information...

GHSA-RGJ5-JJ5Q-V3V7 Memos Cross-site Scripting vulnerability

Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting XSS in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0...

Memos Cross-site Scripting vulnerability

Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting XSS in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0...

CVE-2022-4609 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4609

CVE-2022-4609 affects usememos/memos prior to 0.9.0. It is a stored Cross-site Scripting (XSS) vulnerability in the GitHub repository, allowing attacker-supplied scripts to be stored and executed in the application. Remediation: upgrade to version 0.9.0 or later (patch anticipated in 0.9.0). Some...

CVE-2022-4609 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4609 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4609

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

memos 跨站脚本漏洞

memos is an open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.9.0. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-4609: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

Cross-site scripting

Description memos allow users to upload file and make it public to others. But if the file is html with below content, xss attack can happen. Proof of Concept // PoC.js alert"warning";...

Anonymous Stole and Leaked a Megatrove of Police Documents

The so-called BlueLeaks collection includes internal memos, financial records, and more from over 200 state, local, and federal agencies...

Apple macOS Mojave Notes Information Disclosure Vulnerability

Apple macOS Mojave is a dedicated operating system developed by Apple for Mac computers.Notes is one of the memo components. A security vulnerability exists in the Notes component in Apple macOS Mojave versions prior to 10.14.4. A local attacker could exploit the vulnerability to view memos that...

Apple iOS Notes Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Notes is a component of the application that modifies fonts. A security vulnerability exists in the Notes component of Apple iOS prior to version 11, which stems from the content of locked memos appearing in search results. A...