usememos/memos missing Secure cookie attribute

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 is missing the Secure cookie attribute, making it vulnerable to session hijacking...

usememos/memos Authorization Bypass Through User-Controlled Key vulnerability

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

usememos/memos vulnerable to stored cross-site scripting (XSS)

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 has a feature to upload file and display it, and by uploading a crafted SVG file, an attacker could perform a stored cross-site scripting attack with the image direct link. Thi...

usememos/memos vulnerable to account takeover due to improper access control

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request...

GHSA-FV6C-RFG3-GVJW usememos/memos makes Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

GHSA-QCW2-492V-57XJ usememos/memos missing Secure cookie attribute

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 is missing the Secure cookie attribute, making it vulnerable to session hijacking...

CVE-2022-4690

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4689

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4688

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4684

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

Session fixation

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. An authorization issue vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect authentication...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. A vulnerability in authorization issues exists in versions of memos prior to 0.9.0, which stems from incorrect authorization...

PT-2022-27996 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue concerns the incorrect use of privileged APIs in the GitHub repository usememos/memos. Recommendations: For versions prior to 0.9.0, update to version 0.9.0 or later to resolve the...

CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

PT-2022-27995 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to an Authorization Bypass Through User-Controlled Key and Improper Authentication in the usememos/memos GitHub repository. Recommendations: For versions prior to 0.9.0,...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.0, which stems from stored cross-site scripting XSS...

PT-2022-28001 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to stored Cross-site Scripting XSS in the usememos/memos GitHub repository. This repository is for an open-source, self-hosted memo hub that includes knowledge managemen...

CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.9.0, which stems from its Resource component that allows an attacker to upload a malicious svg file to enable cross-site scripting...