CVE-2023-0107

CVE-2023-0107 affects the open-source memos project (usememos/memos) prior to version 0.10.0. The issue is a stored Cross-site Scripting (XSS) vulnerability stemming from the markup editor that can allow injected scripts in stored content. A fix is available by upgrading to version 0.10.0 or late...

CVE-2023-0112

CVE-2023-0112 is an XSS vulnerability affecting usememos/memos before version 0.10.0. The issue is a Stored XSS in the GitHub repository where user input can be stored and later rendered. Documents confirm affected software, vulnerable component/file (the memos codebase prior to 0.10.0), and the ...

CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0110: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0108: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0111: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.10.0, which stems from the fact that its markup editor does not clean up user input allowing an attacker to implement stored...

PT-2023-16016 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.10.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs in the GitHub repository usememos/memos. This type of attack allows an attacker to inject malicious scripts into a...

CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

CVE-2023-0107

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.10.0...

Cross-site Scripting (XSS)

github.com/usememos/memos is vulnerable to stored cross-site scriptingXSS attacks. An attacker is able to inject and execute malicious javascript via the create post functionality...

Cross-Site Request Forgery (CSRF)

github.com/usememos/memos is vulnerable to cross-site request forgery. An attacker is able to add new members, via user API by exploiting the CSRF issue...

memos cross-site request forgery vulnerability

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.9.1 are vulnerable to cross-site request forgery. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

memos cross-site request forgery vulnerability (CNVD-2023-04536)

memos is an open source hosted memo center with knowledge management and social features. memos suffers from a cross-site request spoofing vulnerability, which can be exploited by attackers to manipulate the behavior of authenticated users by tricking them into clicking on malicious links or...

memos cross-site scripting vulnerability (CNVD-2023-04539)

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.9.1 contain a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

memos cross-site request forgery vulnerability (CNVD-2023-04537)

memos is an open source hosted meme center with knowledge management and social features. memos suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to post on behalf of victims...

Denial Of Service (DoS)

github.com/usememos/memos is vulnerable to denial of service attacks. A malicious user is able to pass a huge number of characters through the Nickname parameter, causing the application to crash through the POST request...

Improper Authentication

github.com/usememos/memos is vulnerable to improper authentication. The vulnerability allows a remote attacker to use the Reset API on any user without consent via IDOR...