Latest usememos memos Vulnerabilities

● CVE-2023-5036
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.
go/github.com/usememos/memos<0.15.1
Usememos Memos<0.15.1
● CVE-2023-4698
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.
Usememos Memos<0.13.2
● CVE-2023-4697
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.
Usememos Memos<0.13.2
go/github.com/usememos/memos<0.13.2
● CVE-2023-4696
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.
Usememos Memos<0.13.2
go/github.com/usememos/memos<0.13.2
● CVE-2022-25978
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce l...
Usememos Memos
go/github.com/usememos/memos<0.10.4-0.20230211093429-b11d2130a084
● CVE-2023-0112
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2023-0108
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2023-0110
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2023-0107
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2023-0106
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2023-0111
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Usememos Memos<0.10.0
● CVE-2022-4866
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4865
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4863
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4849
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4847
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4848
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4851
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4850
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4845
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4846
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4844
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4840
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4841
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4839
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4808
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4807
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4812
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4813
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4809
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4806
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4814
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4810
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4811
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4801
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4804
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4798
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4805
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4802
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4800
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4799
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4803
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4797
Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4796
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4734
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.
Usememos Memos<0.9.1
● CVE-2022-4767
Usememos Memos<0.9.1
● CVE-2022-4691
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Usememos Memos<0.9.0
● CVE-2022-4694
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Usememos Memos<0.9.0
● CVE-2022-4695
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Usememos Memos<0.9.0
● CVE-2022-4692
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Usememos Memos<0.9.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203