Authorization Bypass

github.com/usememos/memos is vulnerable to Authorization Bypass. The vulnerability exists in JWTMiddleware function at jwt.go due to improper handling of JWT tokens which allows an attacker to perform unauthorized actions...

Privilege Escalation

github.com/usememos/memos is vulnerable to Privilege Escalation. The vulnerability exists in JWTMiddleware function at jwt.go due to improper admin privileges which allows an attacker to view high privilege user Admin PRIVATE POST...