Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

GSA_kwCzR0hTQS1jd3JtLTMzcXEtNHcyeM4AAwp6

Moderate EPSS: 0.00035% (0.08906 Percentile) EPSS:
Permalink JSON

usememos/memos Cross-Site Request Forgery vulnerability

Affected Packages Affected Versions Fixed Versions
go:github.com/usememos/memos <= 0.9.0 No known fixed version
0 Dependent packages
0 Dependent repositories

Affected Version Ranges

All affected versions

0.0.1, 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.2.0, 0.2.1, 0.2.2, 0.3.0, 0.3.1, 0.4.0, 0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.4.5, 0.5.0, 0.6.0, 0.6.1, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.9.0

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.

References:

Identifiers

GHSA-cwrm-33qq-4w2x

CVE-2022-4846

Risk

Severity

Moderate

EPSS

EPSS Percentage: 0.00035

EPSS Percentile: 0.08906

Classification

General

Source

GitHub Advisory Database

Origin

Unspecified

Repository

https://github.com/usememos/memos

Date and time

Published

over 2 years ago

Updated

over 2 years ago

API

JSON