mnqazi/CVE-2023-4696

PoC

https://medium.com/@mnqazi/cve-2023-4696-account-takeover-due-to-improper-handling-of-jwt-tokens-in-memos-v0-13-2-13104e1412f3

view exploit source poc_in_githubauthor mnqazipublished 2023-09-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-4696US	critical9.8	1.12% (66th)	Exploit	2023-09-01
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.