Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38742
HistoryJan 03, 2023 - 7:39 a.m.

Cross-Site Request Forgery (CSRF)

2023-01-0307:39:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site request forgery
vulnerability
memos software
adding new members

EPSS

0.001

Percentile

30.7%

github.com/usememos/memos is vulnerable to cross-site request forgery. An attacker is able to add new members, via user API by exploiting the CSRF issue.

EPSS

0.001

Percentile

30.7%