CVE-2022-4848

Description

usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

Affected packages (2)

• Go/github.com/usememos/memosfrom 0, < 0.9.1
• Go/github.com/usememos/memosfrom 0, < 0.9.1

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-vh43-cc6x-prpr
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-4848
• PATCHhttps://github.com/usememos/memos
• WEBhttps://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948
• WEBhttps://huntr.dev/bounties/25de88cc-8d0d-41a1-b069-9ef1327770bc