Vulnerabilities

TI-2022-04410 CVE-2022-4814 · GHSA-6fx9-29x2-fmfj

Improper Access Control in usememos/memos

MEDIUM 53

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0057 Published 2022-12-28 Fixed in 0.9.1 CWE-284

TI-2022-04409 CVE-2022-4813 · GHSA-7qpw-2j9m-rw8c

Insufficient Granularity of Access Control in usememos/memos

MEDIUM 53

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0057 Published 2022-12-28 Fixed in 0.9.1 CWE-1220

TI-2022-04408 CVE-2022-4812 · GHSA-m5pr-wm6q-x4g2

Authorization Bypass Through User-Controlled Key in usememos/memos

MEDIUM 62

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00617 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04407 CVE-2022-4811 · GHSA-hc5q-26h8-r9wf

Authorization Bypass Through User-Controlled Key in usememos/memos

HIGH 69

Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00602 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04406 CVE-2022-4810 · GHSA-qf9q-3wwx-8qjv

Improper Access Control in usememos/memos

MEDIUM 53

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00496 Published 2022-12-28 Fixed in 0.9.1 CWE-284

TI-2022-04405 CVE-2022-4809 · GHSA-6w5w-wx8w-2cq9

Improper Access Control in usememos/memos

HIGH 71

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00973 Published 2022-12-28 Fixed in 0.9.1 CWE-284

TI-2022-04404 CVE-2022-4808 · GHSA-r3p3-5f35-h6mf

Improper Privilege Management in usememos/memos

HIGH 71

Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0045 Published 2022-12-28 Fixed in 0.9.1 CWE-269

TI-2022-04403 CVE-2022-4807 · GHSA-gfj4-wg89-m22r

Improper Access Control in usememos/memos

MEDIUM 53

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00609 Published 2022-12-28 Fixed in 0.9.1 CWE-284

TI-2022-04402 CVE-2022-4806 · GHSA-pp3p-6jjh-rmg7

Authorization Bypass Through User-Controlled Key in usememos/memos

MEDIUM 57

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00807 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04401 CVE-2022-4805 · GHSA-mq5q-gpgv-pwxw

Incorrect Use of Privileged APIs in usememos/memos

MEDIUM 53

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00541 Published 2022-12-28 Fixed in 0.9.1 CWE-648

TI-2022-04400 CVE-2022-4804 · GHSA-qw36-rw5q-gxcq

Improper Authorization in usememos/memos

MEDIUM 57

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00644 Published 2022-12-28 Fixed in 0.9.1 CWE-285

TI-2022-04399 CVE-2022-4803 · GHSA-mfmp-8mqg-q4wm

Authorization Bypass Through User-Controlled Key in usememos/memos

HIGH 71

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00866 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04398 CVE-2022-4802 · GHSA-rx2m-xr4x-54hh

Authorization Bypass Through User-Controlled Key in usememos/memos

MEDIUM 58

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00606 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04397 CVE-2022-4801 · GHSA-f83p-pg86-p922

Insufficient Granularity of Access Control in usememos/memos

MEDIUM 57

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00727 Published 2022-12-28 Fixed in 0.9.1 CWE-1220

TI-2022-04396 CVE-2022-4800 · GHSA-mfvq-m3jj-8864

Improper Verification of Source of a Communication Channel in usememos/memos

MEDIUM 62

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00626 Published 2022-12-28 Fixed in 0.9.1 CWE-940

TI-2022-04395 CVE-2022-4799 · GHSA-jvq8-w7qv-hqp6

Authorization Bypass Through User-Controlled Key in usememos/memos

MEDIUM 62

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00813 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04394 CVE-2022-4798 · GHSA-qcf5-m2c6-89f2

Authorization Bypass Through User-Controlled Key in usememos/memos

MEDIUM 57

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0075 Published 2022-12-28 Fixed in 0.9.1 CWE-639

TI-2022-04393 CVE-2022-4797 · GHSA-qrrf-xvcf-p64q

Improper Restriction of Excessive Authentication Attempts in usememos/memos

MEDIUM 53

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00761 Published 2022-12-28 Fixed in 0.9.1 CWE-307

TI-2022-04392 CVE-2022-4796 · GHSA-ghx2-6v4g-9wmm

Incorrect Use of Privileged APIs in usememos/memos

HIGH 68

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00812 Published 2022-12-28 Fixed in 0.9.1 CWE-648

Vulnerabilities

Filters