CVE-2022-4813 Insufficient Granularity of Access Control in usememos/memos

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28107 · Unknown +1 · Usememos/Memos +1

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an Improper Access Control vulnerability, allowing for authorization bypass through a user-controlled key. This can result in a user being able to delete others' publ...

PT-2022-28096 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue involves the incorrect use of privileged APIs, allowing a user with login permission to delete all notes of the whole application. This can be achieved via the API endpoint...

memos 授权问题漏洞

memos is an open source hosted meme center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to change the visibility status of a victim's memos...

CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4814

CVE-2022-4814 affects usememos/memos prior to 0.9.1. Multiple connected sources describe an improper access control vulnerability (IDOR) that can allow archiving another user’s memo. The core issue is an authorization flaw in how memos handles memo access, enabling unauthorized archival actions. ...

CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

memos 访问控制错误漏洞

memos is an open source hosted memo center with knowledge management and social features. An access control error vulnerability exists in versions prior to memos 0.9.1, which can be exploited by an attacker to edit and delete all other user shortcuts...

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4806

CVE-2022-4806 affects usememos/memos before version 0.9.1. The connected records describe an improper access control/authorization bypass via a user-controlled key in the GitHub repository, enabling an IDOR-style exposure of memos. Reported impact includes unauthorized access to others’ public an...

CVE-2022-4814 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to reset any user's API via IDOR...

CVE-2022-4809 Improper Access Control in usememos/memos

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

memos 授权问题漏洞

memos is an open source hosted meme center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.1, which can be exploited by an attacker to delete any post by all users via IDOR...

CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4812

CVE-2022-4812 affects the open-source memos project (usememos/memos) prior to v0.9.1, where a user-controlled key enables an authorization bypass. Several connected records corroborate an impact described as unauthorized access that can result in deletion of user resources (IDOR-like behavior), i...

memos 访问控制错误漏洞

memos is an open source hosted meme center with knowledge management and social features. An access control error vulnerability exists in memos versions prior to 0.9.1, which can be exploited by an attacker to view any content in a private private memo from another user via the api...

CVE-2022-4802

The CVE-2022-4802 entry covers usememos/memos prior to 0.9.1, where an Authorization Bypass Through a User-Controlled Key is reported. Multiple connected sources describe it as Improper Authorization/IDOR-like behavior that could allow bypassing access controls to view, update, or delete shortcut...

CVE-2022-4810

The CVE-2022-4810 case concerns usememos/memos prior to version 0.9.1 with an improper access control flaw exposed via the API, allowing a user to view private memos from other users. Root cause: insufficient authorization checks on private memo access. Impact: confidentiality of private memo con...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. A vulnerability in authorization issues exists in versions prior to memos 0.9.1, which can be exploited by an attacker to view, update, and delete shortcuts of other users using IDOR...