Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.

usememos

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.

usememos

A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.

usememos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.

usememos

Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.

usememos

Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.

usememos

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

usememos

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

usememos

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

usememos

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.

usememos

Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.

usememos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

usememos

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

usememos

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

usememos