CVE-2022-4849

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4844

CVE-2022-4844 affects usememos/memos prior to 0.9.1. A CSRF vulnerability exists in the web app that could allow an attacker to induce authenticated actions (e.g., creating a HOST user) without user consent. Exploitation details are provided in Huntr’s PoC and related advisories, with remediation...

CVE-2022-4846

CVE-2022-4846 concerns Cross-Site Request Forgery (CSRF) in the open-source memo platform usememos/memos, with affected versions prior to 0.9.1. Multiple connected sources confirm the vulnerability in this GitHub-hosted project and reference similar advisories (GHSA, CNVD/CNNVD, OSV) describing C...

PT-2022-28134 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to an incorrectly specified destination in a communication channel. This affects the GitHub repository usememos/memos. Recommendations: For versions prior to 0.9.1, upda...

CVE-2022-4845

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4850

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4850 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4847

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4841 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28136 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository usememos/memos. This type of attack forces a user to execute unintended actions on a web application that the...

CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4850: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4845

CVE-2022-4845 affects the usememos/memos project prior to version 0.9.1, with a Cross-Site Request Forgery (CSRF) vulnerability reported. The issue arises from CSRF in the web application, enabling unauthorized actions if a user is lured to a malicious site while authenticated. Affected software ...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

usememos/memos Improper Access Control vulnerability

In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API...

GHSA-R3P3-5F35-H6MF usememos/memos Improper Privilege Management vulnerability

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...

usememos/memos Improper Access Control vulnerability

An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others' public and private memos...