Usememos/Memos vulnerabilities, page 3
58 vulnerabilities
Known vulnerabilities in Usememos/Memos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-4846github.com/usememosmemos+2
EPSS score0.26%
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-4812github.com/usememosmemos+2EPSS score0.59%
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-4797github.com/usememosmemos+2EPSS score0.73%
Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-4798github.com/usememosmemos+2EPSS score0.72%
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-4866github.com/usememosmemos+2EPSS score1.02%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-4686github.com/usememosmemos+2EPSS score0.75%
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.CVE-2022-4767github.com/usememosmemos+2EPSS score0.70%
Denial of Service in GitHub repository usememos/memos prior to 0.9.1.CVE-2023-0109github.com/usememosmemos+2EPSS score0.44%
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.CVE-2023-0112github.com/usememosmemos+2EPSS score0.59%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0106github.com/usememosmemos+2EPSS score0.66%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0110github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0108github.com/usememosmemos+2EPSS score0.53%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0107github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0111github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-4698github.com/usememosmemos+2EPSS score0.92%
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-4696github.com/usememosmemos+2EPSS score1.12%
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-4697github.com/usememosmemos+2EPSS score0.85%
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-5036github.com/usememosmemos+2EPSS score0.32%
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.