CVE-2022-4813: usememos memos

Vulnerability summary

CVE-2022-4813 is a high (CVSS 8.6) vulnerability in usememos memos. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 45.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-12-2022
   PublishedVulnerability first disclosed.
2. 10-04-2025
   Last modifiedVulnerability information updated.

Description

Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.

• CWE-1220Insufficient Granularity of Access ControlThe product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.