Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

GSA_kwCzR0hTQS1jNWhxLTM1aDctcjl4NM4AAwqA

Moderate EPSS: 0.00054% (0.16687 Percentile) EPSS:
Permalink JSON

usememos/memos Cross-Site Request Forgery vulnerability

Affected Packages Affected Versions Fixed Versions
go:github.com/usememos/memos <= 0.9.0 No known fixed version
0 Dependent packages
0 Dependent repositories

Affected Version Ranges

All affected versions

0.0.1, 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.2.0, 0.2.1, 0.2.2, 0.3.0, 0.3.1, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.5.0, 0.6.0, 0.6.1, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.9.0

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.

References:

Identifiers

GHSA-c5hq-35h7-r9x4

CVE-2022-4850

Risk

Severity

Moderate

EPSS

EPSS Percentage: 0.00054

EPSS Percentile: 0.16687

Classification

General

Source

GitHub Advisory Database

Origin

Unspecified

Repository

https://github.com/usememos/memos

Date and time

Published

over 2 years ago

Updated

over 2 years ago

API

JSON