Lucene search
+L

6 matches found

OSV
OSV
added 2024/08/05 9:29 p.m.72 views

GHSA-6FCF-G3MP-XJ2X memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1...

5.8CVSS5.4AI score0.01049EPSS
SaveExploits1References4
Rows per page
Query Builder