606 matches found
GO-2022-1192 usememos/memos missing Secure cookie attribute in github.com/usememos/memos
usememos/memos missing Secure cookie attribute in github.com/usememos/memos...
GO-2023-2065 Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
Cross-Site Request Forgery CSRF in usememos/memos in github.com/usememos/memos...
GO-2023-2038 Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos...
GO-2023-2036 usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
usememos/memos vulnerable to privilege escalation in github.com/usememos/memos...
GO-2023-1461 usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos
usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos...
GO-2023-1462 usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos
usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos...
GO-2023-1469 usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos
usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos...
GO-2023-1449 usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos
usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos...
GO-2023-1291 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...
GO-2023-1292 usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos
usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos...
GO-2024-3046 memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos...
SUSE CVE-2022-4806
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
GHSA-2G7R-9XQ5-C6HV Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.15.1...
Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.15.1...
CVE-2023-5036 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.15.1...
CVE-2023-5036 Cross-Site Request Forgery (CSRF) in usememos/memos
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.15.1...
CVE-2023-5036
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.15.1...
PT-2023-31535 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.15.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the usememos/memos repository. It affects the getimage endpoint. No information is provided about the estimated number of...
Privilege Escalation
github.com/usememos/memos is vulnerable to Privilege Escalation. The vulnerability exists in JWTMiddleware function at jwt.go due to improper admin privileges which allows an attacker to view high privilege user Admin PRIVATE POST...
