memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.10.0, which stems from the fact that it allows an attacker to bypass csp configuration by calling an attacker-uploaded js file from...