Improper Access Control

github.com/usememos/memos is vulnerable to improper access control. A remote attacker is able to modify the usernames and email addresses of other users and thereby take over their accounts via the vulnerable user endpoint...