CVE-2022-4691 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4683 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4695 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

memos 授权问题漏洞

memos is an open source hosted memo center with knowledge management and social features. An authorization issue vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect authentication...

CVE-2022-4695 Cross-site Scripting (XSS) - Stored in usememos/memos

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

PT-2022-28006 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...

memos 访问控制错误漏洞

memos is an open source hosted memo center with knowledge management and social features. An Access Control Error vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect access control...

PT-2022-27994 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue concerns improper access control in the usememos/memos GitHub repository. This allows unauthorized access to certain resources. No information is provided about the estimated numbe...

CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

PT-2022-28011 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application accepts user input without proper validation and stores it, allowing an attacker to inject malicio...

PT-2022-27987 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to a sensitive cookie in an HTTPS session without the 'Secure' attribute. This affects an open-source, self-hosted memo hub with knowledge management and socialization...

CVE-2022-4694

CVE-2022-4694 is a stored cross-site scripting vulnerability in the open-source memo app usememos/memos, affecting versions prior to 0.9.0. The issue arises from unvalidated input being stored and then rendered to other users, enabling script execution in victims’ browsers. Reported as XSS with p...

CVE-2022-4695

CVE-2022-4695 affects usememos/memos prior to version 0.9.0. The issue is described as a Stored Cross-site Scripting (XSS) vulnerability arising from how user input is handled and stored (e.g., when creating a post) and later displayed. Documented impact is XSS with potential interaction required...

CVE-2022-4691

CVE-2022-4691 affects usememos/memos prior to 0.9.0. The vulnerability is a stored Cross-site Scripting (XSS) issue in the application’s handling of user input (notably tied to content uploaded/ displayed by the app), allowing injected scripts to run in a victim’s browser. Root cause: input is st...

CVE-2022-4688

CVE-2022-4688 affects usememos/memos; versions prior to 0.9.0 are vulnerable to improper authorization. The issue can allow a user to modify other users’ nicknames, usernames, and emails without permission. No exploit details are provided in the sources beyond the general description. Mitigation:...

CVE-2022-4690

CVE-2022-4690 is a stored XSS in usememos/memos prior to 0.9.0. An attacker could abuse the SVG upload/display feature by submitting a crafted SVG to execute script via the image link. Impact is stored XSS within memos prior to upgrade. Remediation: upgrade to version 0.9.0 or later; as a workaro...