Privilege Escalation

2023-01-0215:01:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

privilege escalation

authenticated user

delete api

software security

0.001 Low

EPSS

Percentile

29.2%

JSON

github.com/usememos/memos is vulnerable to privilege escalation. An authenticated user is able to delete all notes of the whole application via the DELETE API.

CPENameOperatorVersion
github.com/usememos/memoslev0.9.0
github.com/usememos/memoslev0.9.0

CPE	Name	Operator	Version
	github.com/usememos/memos	le	v0.9.0
	github.com/usememos/memos	le	v0.9.0

References

github.com/advisories/GHSA-ghx2-6v4g-9wmm

github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53

github.com/usememos/memos/pull/870

huntr.dev/bounties/efe8001b-1d6a-41af-a64c-736705cc66a6

huntr.dev/bounties/efe8001b-1d6a-41af-a64c-736705cc66a6/

0.001 Low

EPSS

Percentile

29.2%

JSON

Related for VERACODE:38723