6762 matches found
CVE-2022-4803
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4796
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
Code injection
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
Improper access control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
Code injection
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
Improper access control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4808 Improper Privilege Management in usememos/memos
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4805
CVE-2022-4805 affects usememos/memos prior to 0.9.1. The root cause is incorrect use of privileged APIs, enabling a user to archive private memos, delete any shortcut, and edit shortcuts from other users via the API. Impact is unauthorized modification/access of sensitive data as described across...
CVE-2022-4799
CVE-2022-4799 affects usememos/memos before 0.9.1. Root cause: Authorization Bypass Through a User-Controlled Key, i.e., improper authentication. Impact: unauthorized access to resources (owners/posts) and, per CNVD, potential IDOR-style actions like deleting posts. Remediation: upgrade to versio...
CVE-2022-4806 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4802
The CVE-2022-4802 entry covers usememos/memos prior to 0.9.1, where an Authorization Bypass Through a User-Controlled Key is reported. Multiple connected sources describe it as Improper Authorization/IDOR-like behavior that could allow bypassing access controls to view, update, or delete shortcut...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4800 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4800 Improper Verification of Source of a Communication Channel in usememos/memos
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...