606 matches found
CVE-2022-4811: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4811
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4811 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28113 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to a Comparison of Object References Instead of Object Contents, which can lead to an Authorization Bypass Through User-Controlled Key. This allows for potential...
PT-2022-28111 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper access control in the usememos/memos GitHub repository. A user can view any content from private memos from other users via the API. This affects versions...
CVE-2022-4810 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4811
The CVE-2022-4811 vulnerability concerns usememos/memos. It is an Authorization Bypass Through User-Controlled Key that allows an unauthorized user to access private memos by manipulating the URL. This affects versions prior to 0.9.1. The issue is documented across multiple sources (including Red...
CVE-2022-4810
The CVE-2022-4810 case concerns usememos/memos prior to version 0.9.1 with an improper access control flaw exposed via the API, allowing a user to view private memos from other users. Root cause: insufficient authorization checks on private memo access. Impact: confidentiality of private memo con...
CVE-2022-4809: Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4806 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28107 · Unknown +1 · Usememos/Memos +1
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an Improper Access Control vulnerability, allowing for authorization bypass through a user-controlled key. This can result in a user being able to delete others' publ...
CVE-2022-4809 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28108 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper access control in the usememos/memos GitHub repository. Specifically, in versions prior to 0.9.1, users can edit and delete all other users' shortcuts...
CVE-2022-4807: Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4808 Improper Privilege Management in usememos/memos
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4814 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4813
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...