Lucene search
Veracode Vulnerability DatabaseVERACODE:38730HistoryJan 02, 2023 - 5:04 p.m.
Improper Access Control
2023-01-0217:04:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
improper access control
account takeover
change password
0.001 Low
EPSS
Percentile
34.8%
github.com/usememos/memos is vulnerable to improper access control. Access control bypass via insecure direct object references allows an attacker to perform actions on a user’s behalf, through Change Password feature, resulting in account takeover.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/usememos/memos | le | v0.9.0 | |
| github.com/usememos/memos | le | v0.9.0 |
Related
nvd
nvd
CVE-2022-4689
2022-12-23 12:15:12
osv
osv
CVE-2022-4689
2022-12-23 12:15:12
usememos/memos vulnerable to account takeover due to improper access control
2022-12-23 12:30:25
cvelist
cvelist
CVE-2022-4689 Improper Access Control in usememos/memos
2022-12-23 00:00:00
cve
cve
CVE-2022-4689
2022-12-23 12:15:12
github
github
usememos/memos vulnerable to account takeover due to improper access control
2022-12-23 12:30:25
prion
prion
Improper access control
2022-12-23 12:15:00
huntr
huntr
Account takeover via changing password
2022-12-19 18:31:03