Improper Access Control

2022-12-2706:52:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper access control

insecure direct object references

change password vulnerability

user actions

EPSS

0.001

Percentile

37.0%

JSON

github.com/usememos/memos is vulnerable to improper access control. The vulnerability exists in multiple functions due to insecure direct object references which allows an attacker to perform actions on a user’s behalf via Change Password feature.