Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38679
HistoryDec 28, 2022 - 1:44 p.m.

Authorization Bypass

2022-12-2813:44:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
authorization bypass
lack of validation
authentication
attacker
modify
permissions

EPSS

0.001

Percentile

41.3%

github.com/usememos/memos is vulnerable to authorization bypass. The vulnerability exists due to a lack of validation in authentication, which allows an attacker to modify the nickname, username and email without proper permissions.

EPSS

0.001

Percentile

41.3%

Related for VERACODE:38679