CVE Vulnerabilities

CVE-2022-4687

Improper Privilege Management

Published: Dec 23, 2022 | Modified: Dec 30, 2022
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Memos Usememos * 0.9.0 (excluding)

Potential Mitigations

References