Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38708
HistoryJan 02, 2023 - 10:53 a.m.

Improper Authorization

2023-01-0210:53:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
improper authorization
access restriction bypass
shortcut endpoint
user shortcuts

EPSS

0.001

Percentile

21.8%

github.com/usememos/memos is vulnerable to improper authorization. Access restriction bypass via the shortcut endpoint allows an attacker to view, modify, and delete other users’ shortcuts.

EPSS

0.001

Percentile

21.8%

Related for VERACODE:38708