CVE-2023-4698

EUVD-2023-2475
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
@huntrdevCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
usememosmemos
𝑥
< 0.13.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd
https://huntr.dev/bounties/e1107d79-1d63-4238-90b7-5cc150512654
https://github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd
https://huntr.dev/bounties/e1107d79-1d63-4238-90b7-5cc150512654