1 matches found
Server Side Request Forgery
github.com/usememos/memos is vulnerable to Server Side Request Forgery. The vulnerability is due to improper input validation at the /o/get/httpmeta endpoint in the file httpgetter.go, allowing unauthenticated users to enumerate the internal network and receive limited HTML values in JSON form...
5.8CVSS7AI score0.01049EPSS
SaveExploits1References2Affected Software1
20