CVE-2024-29028
EUVD-2024-251219.04.2024, 15:15
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| usememos | memos | 0.13.2 ≤ 𝑥 < 0.16.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| usememos | memos | 𝑥 < 0.13.2 | ADP |
References