606 matches found
CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4807
CVE-2022-4807 maps to usememos/memos with an improper access control flaw prior to version 0.9.1. Public sources (GHSA- GFJ4-WG89-M22R and OSV GO-2022-1256) report that in versions before 0.9.1, a user can edit and delete other users’ shortcuts, indicating a vulnerability in access permissions fo...
CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4800
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
PT-2022-28115 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to improper access control in the GitHub repository usememos/memos. Recommendations: For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4807
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802
The CVE-2022-4802 entry covers usememos/memos prior to 0.9.1, where an Authorization Bypass Through a User-Controlled Key is reported. Multiple connected sources describe it as Improper Authorization/IDOR-like behavior that could allow bypassing access controls to view, update, or delete shortcut...
CVE-2022-4809: Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4812
CVE-2022-4812 affects the open-source memos project (usememos/memos) prior to v0.9.1, where a user-controlled key enables an authorization bypass. Several connected records corroborate an impact described as unauthorized access that can result in deletion of user resources (IDOR-like behavior), i...
CVE-2022-4807 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4814
CVE-2022-4814 affects usememos/memos prior to 0.9.1. Multiple connected sources describe an improper access control vulnerability (IDOR) that can allow archiving another user’s memo. The core issue is an authorization flaw in how memos handles memo access, enabling unauthorized archival actions. ...
CVE-2022-4805
CVE-2022-4805 affects usememos/memos prior to 0.9.1. The root cause is incorrect use of privileged APIs, enabling a user to archive private memos, delete any shortcut, and edit shortcuts from other users via the API. Impact is unauthorized modification/access of sensitive data as described across...
CVE-2022-4806
CVE-2022-4806 affects usememos/memos before version 0.9.1. The connected records describe an improper access control/authorization bypass via a user-controlled key in the GitHub repository, enabling an IDOR-style exposure of memos. Reported impact includes unauthorized access to others’ public an...
CVE-2022-4811 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1...
PT-2022-28107 · Unknown +1 · Usememos/Memos +1
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an Improper Access Control vulnerability, allowing for authorization bypass through a user-controlled key. This can result in a user being able to delete others' publ...