CVE-2022-4689
published 2022-12-23CVE-2022-4689: Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.
PriorityP347high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.74%
50.0th percentile
Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | usememos_memos | >= 0 < 0.9.0 | 0.9.0 |
| usememos | memos | < 0.9.0 | 0.9.0 |
| usememos | usememos_memos | >= unspecified < 0.9.0 | 0.9.0 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv3.08.3HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos
osv·2024-08-21
CVE-2022-4689 usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos
usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos
usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos
OSV
usememos/memos vulnerable to account takeover due to improper access control
osv·2022-12-23
CVE-2022-4689 [HIGH] usememos/memos vulnerable to account takeover due to improper access control
usememos/memos vulnerable to account takeover due to improper access control
usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request.
GHSA
usememos/memos vulnerable to account takeover due to improper access control
ghsa·2022-12-23
CVE-2022-4689 [HIGH] CWE-284 usememos/memos vulnerable to account takeover due to improper access control
usememos/memos vulnerable to account takeover due to improper access control
usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-23
Published