Lucene search
+L

1 matches found

Veracode
Veracode
added 2024/04/22 7:18 a.m.16 views

Server Side Request Forgery

github.com/usememos/memos is vulnerable to Server Side Request Forgery. The vulnerability is due to improper input validation at the /o/get/httpmeta endpoint in the file httpgetter.go, allowing unauthenticated users to enumerate the internal network and receive limited HTML values in JSON form...

5.8CVSS7AI score0.01049EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder