CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4839 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4846 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4841

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4841

CVE-2022-4841 is a stored Cross-site Scripting (XSS) vulnerability in the open-source project usememos/memos, present in versions prior to 0.9.1. The public descriptions consistently state that user input stored by the application could be reflected in later displays, enabling XSS. The available ...

CVE-2022-4851 Improper Handling of Values in usememos/memos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4845 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

usememos/memos Improper Access Control vulnerability

An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others' public and private memos...

usememos/memos Improper Access Control vulnerability

In usememos/memos 0.9.0 and prior, users can edit and delete all other users' shortcuts...

usememos/memos Improper Access Control vulnerability

In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API...

usememos/memos Incorrect Use of Privileged APIs vulnerability

In usememos/memos 0.9.0 and prior, a user can archive any private memos, delete any shortcut, and edit any shortcut from other users via API...

GHSA-MQ5Q-GPGV-PWXW usememos/memos Incorrect Use of Privileged APIs vulnerability

In usememos/memos 0.9.0 and prior, a user can archive any private memos, delete any shortcut, and edit any shortcut from other users via API...

GHSA-M5PR-WM6Q-X4G2 usememos/memos vulnerable to Comparison of Object References Instead of Object Contents

Comparison of Object References Instead of Object Contents in GitHub repository usememos/memos 0.9.0 and prior...

GHSA-R3P3-5F35-H6MF usememos/memos Improper Privilege Management vulnerability

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1...

GHSA-QF9Q-3WWX-8QJV usememos/memos Improper Access Control vulnerability

In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API...

usememos/memos vulnerable to Improper Authorization

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

usememos/memos vulnerable to Improper Verification of Source of a Communication Channel

usememos/memos 0.9.0 and prior is vulnerable to Improper Verification of Source of a Communication Channel...

usememos/memos Improper Authorization vulnerability

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

usememos/memos has Insufficient Granularity of Access Control

usememos/memos 0.9.0 and prior allows an attacker to archive any user's public or private post...