877 matches found
CVE-2022-4690
CVE-2022-4690 is a stored XSS in usememos/memos prior to 0.9.0. An attacker could abuse the SVG upload/display feature by submitting a crafted SVG to execute script via the image link. Impact is stored XSS within memos prior to upgrade. Remediation: upgrade to version 0.9.0 or later; as a workaro...
CVE-2022-4694
CVE-2022-4694 is a stored cross-site scripting vulnerability in the open-source memo app usememos/memos, affecting versions prior to 0.9.0. The issue arises from unvalidated input being stored and then rendered to other users, enabling script execution in victims’ browsers. Reported as XSS with p...
CVE-2022-4686: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...
memos 授权问题漏洞
memos is an open source hosted memo center with knowledge management and social features. An authorization issue vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect authentication...
PT-2022-28006 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing an attacker to inject...
CVE-2022-4684: Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4689: Improper Access Control
Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...
PT-2022-27993 · Fortinet · Fortigate
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to improper access control in the usememos/memos GitHub repository. There have been real-world incidents where this issue was exploited, including a leak of data from ov...
CVE-2022-4687: Incorrect Use of Privileged APIs
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...
PT-2022-28001 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue is related to stored Cross-site Scripting XSS in the usememos/memos GitHub repository. This repository is for an open-source, self-hosted memo hub that includes knowledge managemen...
CVE-2022-4695: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4691: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4690: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4684
CVE-2022-4684 describes an improper access control vulnerability in the GitHub repository for usememos/memos prior to version 0.9.0. The issue impacts the project’s access boundaries, allowing potential unauthorized access as indicated by the CVE description and corroborating sources. Public refe...
CVE-2022-4688: Improper Authorization
Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4683: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4690 Cross-site Scripting (XSS) - Stored in usememos/memos
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0...
