Memos Security Vulnerabilities and Issues — Memos CVE List

Lucene search

UsememosMemos

8 matches found

CVE•added 2024/04/19 4:15 p.m.•83 views

CVE-2024-29029

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current s...

6.1CVSS6AI score0.00344EPSS

CVE•added 2023/01/07 4:15 a.m.•81 views

CVE-2023-0107

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

6.5CVSS5.4AI score0.00065EPSS

CVE•added 2022/12/29 6:15 p.m.•66 views

CVE-2022-4850

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

6.5CVSS6.5AI score0.00054EPSS

CVE•added 2022/12/28 2:15 p.m.•57 views

CVE-2022-4810

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

6.3CVSS4.8AI score0.00048EPSS

CVE•added 2022/12/29 6:15 p.m.•57 views

CVE-2022-4846

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

6.5CVSS6.4AI score0.00035EPSS

CVE•added 2023/02/15 5:15 a.m.•56 views

CVE-2022-25978

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

6.1CVSS5.9AI score0.00086EPSS

CVE•added 2022/12/29 6:15 p.m.•54 views

CVE-2022-4845

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

6.7CVSS4.8AI score0.00049EPSS

CVE•added 2022/12/23 12:15 p.m.•44 views

CVE-2022-4683

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0.

6.5CVSS5.3AI score0.00138EPSS