usememos/memos

7 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-0109

  Stored XSS in usememos/memos

  A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed,…

  usememos usememos/memos github.com/usememos/memos Go
  Nov 15, 2024
• Critical 9.8
  CVE-2023-4696 Public exploit

  Improper Access Control in usememos/memos

  Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

  usememos usememos/memos github.com/usememos/memos Go
  Sep 1, 2023
• Critical 9.0
  CVE-2023-0106

  Cross-site Scripting (XSS) - Stored in usememos/memos

  Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

  usememos usememos/memos github.com/usememos/memos Go
  Jan 7, 2023
• Critical 9.8
  CVE-2022-4866

  Cross-site Scripting (XSS) - Stored in usememos/memos

  Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

  usememos usememos/memos github.com/usememos/memos Go
  Dec 31, 2022
• Critical 9.8
  CVE-2022-4851

  Improper Handling of Values in usememos/memos

  Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.

  usememos usememos/memos github.com/usememos/memos Go
  Dec 29, 2022
• Critical 9.1
  CVE-2022-4802

  Authorization Bypass Through User-Controlled Key in usememos/memos

  Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.

  usememos usememos/memos github.com/usememos/memos Go
  Dec 28, 2022
• Critical 9.8
  CVE-2022-4797

  Improper Restriction of Excessive Authentication Attempts in usememos/memos

  Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.

  usememos usememos/memos github.com/usememos/memos Go
  Dec 28, 2022