6602 matches found
CVE-2022-4812 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4798 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4801 Insufficient Granularity of Access Control in usememos/memos
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4800 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4798 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4810 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4799
CVE-2022-4799 affects usememos/memos before 0.9.1. Root cause: Authorization Bypass Through a User-Controlled Key, i.e., improper authentication. Impact: unauthorized access to resources (owners/posts) and, per CNVD, potential IDOR-style actions like deleting posts. Remediation: upgrade to versio...
CVE-2022-4798
CVE-2022-4798 affects usememos/memos versions prior to 0.9.1. The issue is an Authorization Bypass Through a User-Controlled Key (Improper Authorization) that could enable unauthorized access or actions such as potential API reset (per reported sources). Affected component is the memo platform’s ...
CVE-2022-4804
CVE-2022-4804 affects the open-source project usememos/memos prior to version 0.9.1 . The root cause is described as Improper Authorization in the GitHub repository, with documented implications including the ability to change a victim’s memo visibility (per CNNVD/NVD summaries and OSV/GHSA refer...
CVE-2022-4799 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4805 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4814 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4809 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos
Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4799 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...