Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38711
HistoryJan 02, 2023 - 12:53 p.m.

Privilege Escalation

2023-01-0212:53:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
privilege escalation
vulnerable software
insecure object references
attacker access

EPSS

0.001

Percentile

21.8%

github.com/usememos/memos is vulnerable to privilege escalation. Incorrect use of privileged APIs due to insecure direct object references allows an attacker to archive private memos and delete/edit shortcuts on the user’s behalf.

EPSS

0.001

Percentile

21.8%

Related for VERACODE:38711