877 matches found
Exploit for Improper Input Validation in Usememos Memos
CVE-2023-4698 Local File Inclusion LFI in usememos/memos...
Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. As of commit c9aa2eeb9 access tokens which fail validation are rejected...
GHSA-J2GJ-G3P9-7MRR Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. As of commit c9aa2eeb9 access tokens which fail validation are rejected...
CVE-2023-4697
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4696
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698 Improper Input Validation in usememos/memos
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4697 Improper Privilege Management in usememos/memos
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4697 Improper Privilege Management in usememos/memos
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698 Improper Input Validation in usememos/memos
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4697
CVE-2023-4697 affects the open-source project memos (GitHub: usememos/memos) prior to version 0.13.2. The root cause is improper privilege management within the application, leading to likely privilege escalation. The CVSS base metrics indicate HIGH impact to confidentiality, integrity, and avail...
CVE-2023-4698
CVE-2023-4698 affects usememos/memos prior to 0.13.2. The connected exploit doc describes a Local File Inclusion (LFI) via an inadequate validation of InternalPath, enabling access to server files (post-auth or remote code execution risks are implied by LFI in the blog). Public advisories consist...
CVE-2023-4697
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4698
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4696 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4696 Improper Access Control in usememos/memos
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
CVE-2023-4696
CVE-2023-4696 — Affected: usememos/memos before version 0.13.2. Root cause: improper access control in the GitHub-hosted project. Impact: high/critical confidentiality, integrity, and availability risk per CVSS (NVD 3.1: 9.8; CRITICAL). Exploitation details are not provided in the connected docs....
CVE-2023-4696
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2...
memos Access Control Error Vulnerability
memos is an open source hosted memo center with knowledge management and social features. An Access Control Error vulnerability exists in memos versions prior to 0.13.2, which stems from incorrect access control...
