Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: usememos/memos 0.9.0 Clear all filters
TI-2022-04292 CVE-2022-4695 · GHSA-c2v4-8r9g-g5xj

Cross-site Scripting (XSS) - Stored in usememos/memos

Priority HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00696 Published 2022-12-23 Fixed in 0.9.0 CWE-79
TI-2022-04291 CVE-2022-4694 · GHSA-v92p-phmp-xffr

Cross-site Scripting (XSS) - Stored in usememos/memos

Priority HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00576 Published 2022-12-23 Fixed in 0.9.0 CWE-79
TI-2022-04289 CVE-2022-4692 · GHSA-f552-97qx-c694

Cross-site Scripting (XSS) - Stored in usememos/memos

Priority HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-12-23 Fixed in 0.9.0 CWE-79
TI-2022-04288 CVE-2022-4691 · GHSA-97rc-mm5j-f6rj

Cross-site Scripting (XSS) - Stored in usememos/memos

Priority HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00742 Published 2022-12-23 Fixed in 0.9.0 CWE-79
TI-2022-04287 CVE-2022-4690 · GHSA-c8jh-vcjh-fx2w

Cross-site Scripting (XSS) - Stored in usememos/memos

Priority HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00642 Published 2022-12-23 Fixed in 0.9.0 CWE-79
TI-2022-04286 CVE-2022-4689 · GHSA-w57v-6xp4-rm2v

Improper Access Control in usememos/memos

Priority HIGH 71

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00791 Published 2022-12-23 Fixed in 0.9.0 CWE-284
TI-2022-04285 CVE-2022-4688 · GHSA-vwg4-846x-f94v

Improper Authorization in usememos/memos

Priority HIGH 71

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00791 Published 2022-12-23 Fixed in 0.9.0 CWE-285
TI-2022-04284 CVE-2022-4687 · GHSA-fv6c-rfg3-gvjw

Incorrect Use of Privileged APIs in usememos/memos

Priority HIGH 68

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00676 Published 2022-12-23 Fixed in 0.9.0 CWE-648
TI-2022-04282 CVE-2022-4684 · GHSA-qr52-59r6-49f4

Improper Access Control in usememos/memos

Priority HIGH 71

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00648 Published 2022-12-23 Fixed in 0.9.0 CWE-284