GHSA-hc5q-26h8-r9wf

ghsaUSosv

usememos/memos Improper Authorization vulnerability

view advisory published 2022-12-28Licence: CC-BY-4.0

In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-4811USmedium5.4OT elevated—
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan