GitHub Advisoryadvisory · Go

GHSA-9v48-2h5x-fvpm usememos/memos vulnerable to improper access control

MEDIUM Published 2022-12-23 Modified 2023-01-23 Official page ↗

Aliases: CVE-2022-4685
Ecosystem: Go
Packages: github.com/usememos/memos
Severity: Moderate
Weaknesses: CWE-284
Reviewed: 2022-12-29

Affected packages

• Go github.com/usememos/memos: < 0.9.0 → fixed in 0.9.0

Description

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.

Related

Alias · not in database (1)

CVE-2022-4685

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References