GO-2024-3274 Stored XSS using two files in usememos/memos in github.com/usememos/memos

Stored XSS using two files in usememos/memos in github.com/usememos/memos...

CVE-2023-0109 Stored XSS in usememos/memos

A stored cross-site scripting XSS vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This...

Cross-Origin Resource Sharing (CORS) Bypass

github.com/usememos/memos is vulnerable to Cross-Origin Resource Sharing CORS Bypass. The vulnerability is due to a CORS misconfiguration where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true, which may allow an attacker to perform cross-origin requests,...

GO-2022-1263 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...

GO-2022-1264 usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos...

GO-2022-1239 usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

usememos/memos Improper Authentication vulnerability in github.com/usememos/memos...

GO-2022-1259 usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

usememos/memos Improper Authorization vulnerability in github.com/usememos/memos...

GO-2022-1243 usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

usememos/memos Improper Authorization vulnerability in github.com/usememos/memos...

GO-2022-1248 usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos...

GO-2022-1236 usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos...

GO-2022-1225 usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos...

GO-2022-1219 usememos/memos Denial of Service vulnerability in github.com/usememos/memos

usememos/memos Denial of Service vulnerability in github.com/usememos/memos...

GO-2022-1244 usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos...

GO-2022-1253 usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos...

GO-2022-1251 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...

GO-2022-1218 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...

GO-2022-1215 usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos...

GO-2023-2065 Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

Cross-Site Request Forgery CSRF in usememos/memos in github.com/usememos/memos...

GO-2023-2036 usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

usememos/memos vulnerable to privilege escalation in github.com/usememos/memos...

GO-2023-2038 Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos...