Lucene search
GoogleOSV:GO-2022-1215HistoryAug 21, 2024 - 4:03 p.m.
usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos
2024-08-2116:03:59
Google
osv.dev
2
authorization bypass
user-controlled key
github.com/usememos/memos
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos
Related
veracode
veracode
Improper Authentication
2023-01-02 16:40:15
cvelist
cvelist
nvd
nvd
CVE-2022-4686
2022-12-23 12:15:11
osv
osv
CVE-2022-4686
2022-12-23 12:15:11
cve
cve
CVE-2022-4686
2022-12-23 12:15:11
prion
prion
Authorization
2022-12-23 12:15:00
huntr
huntr
Reset API any user via IDOR
2022-12-22 17:40:17
github
github
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
Related for OSV:GO-2022-1215