Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38741
HistoryJan 03, 2023 - 7:26 a.m.

Cross-Site Request Forgery (CSRF)

2023-01-0307:26:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site request forgery
vulnerable
api
attacker
victim
software

EPSS

0.001

Percentile

30.4%

github.com/usememos/memos is vulnerable to cross-site request forgery. An attacker is able to send a malicious link via the memo API to the victim and when they click on it, any thoughts will be added.

EPSS

0.001

Percentile

30.4%

Related for VERACODE:38741