Lucene search
Veracode Vulnerability DatabaseVERACODE:38729HistoryJan 02, 2023 - 4:50 p.m.
Privilege Escalation
2023-01-0216:50:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
privilege escalation
vulnerability
apis
elevated privileges
user actions
0.001 Low
EPSS
Percentile
26.6%
github.com/usememos/memos is vulnerable to privilege escalation. Incorrect use of privileged APIs allows an attacker to perform actions on a user’s behalf through insecure direct object references resulting in elevated privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/usememos/memos | le | v0.9.0 | |
| github.com/usememos/memos | le | v0.9.0 |
Related
cvelist
cvelist
CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos
2022-12-23 00:00:00
nvd
nvd
CVE-2022-4687
2022-12-23 12:15:11
huntr
huntr
Privilege vulnerability at API Change Password
2022-12-21 07:26:38
osv
osv
CVE-2022-4687
2022-12-23 12:15:11
usememos/memos makes Incorrect Use of Privileged APIs
2022-12-23 12:30:25
prion
prion
Code injection
2022-12-23 12:15:00
cve
cve
CVE-2022-4687
2022-12-23 12:15:11
github
github
usememos/memos makes Incorrect Use of Privileged APIs
2022-12-23 12:30:25