713 matches found
CVE-2022-4851 Improper Handling of Values in usememos/memos
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4851 Improper Handling of Values in usememos/memos
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4846
CVE-2022-4846 concerns Cross-Site Request Forgery (CSRF) in the open-source memo platform usememos/memos, with affected versions prior to 0.9.1. Multiple connected sources confirm the vulnerability in this GitHub-hosted project and reference similar advisories (GHSA, CNVD/CNNVD, OSV) describing C...
CVE-2022-4845
CVE-2022-4845 affects the usememos/memos project prior to version 0.9.1, with a Cross-Site Request Forgery (CSRF) vulnerability reported. The issue arises from CSRF in the web application, enabling unauthorized actions if a user is lured to a malicious site while authenticated. Affected software ...
CVE-2022-4850
The CVE-2022-4850 entry describes a Cross-Site Request Forgery (CSRF) in the GitHub repository usememos/memos for versions prior to 0.9.1. Affected software: usememos/memos (pre-0.9.1). The underlying issue is CSRF that could enable an attacker to cause unintended actions on behalf of an authenti...
CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4840 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28136 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. This type of attack forces a user to execute unintended actions on a web application that the...
GHSA-R3P3-5F35-H6MF usememos/memos Improper Privilege Management vulnerability
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...
GHSA-MQ5Q-GPGV-PWXW usememos/memos Incorrect Use of Privileged APIs vulnerability
In usememos/memos 0.9.0 and prior, a user can archive any private memos, delete any shortcut, and edit any shortcut from other users via API...
GHSA-QF9Q-3WWX-8QJV usememos/memos Improper Access Control vulnerability
In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API...
usememos/memos Incorrect Use of Privileged APIs vulnerability
In usememos/memos 0.9.0 and prior, a user can archive any private memos, delete any shortcut, and edit any shortcut from other users via API...
usememos/memos Improper Access Control vulnerability
In usememos/memos 0.9.0 and prior, users can edit and delete all other users' shortcuts...
usememos/memos Improper Access Control vulnerability
In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API...
GHSA-M5PR-WM6Q-X4G2 usememos/memos vulnerable to Comparison of Object References Instead of Object Contents
Comparison of Object References Instead of Object Contents in GitHub repository usememos/memos 0.9.0 and prior...
usememos/memos Improper Access Control vulnerability
An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others' public and private memos...
GHSA-MFVQ-M3JJ-8864 usememos/memos vulnerable to Improper Verification of Source of a Communication Channel
usememos/memos 0.9.0 and prior is vulnerable to Improper Verification of Source of a Communication Channel...