CVE-2023-5036

Description

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.

Affected packages (2)

• Go/github.com/usememos/memosfrom 0, < 0.15.1
• Go/github.com/usememos/memosfrom 0, < 0.15.1

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-2g7r-9xq5-c6hv
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-5036
• PATCHhttps://github.com/usememos/memos
• WEBhttps://github.com/usememos/memos/commit/97b434722cf0abe3cfcad5ac9e3d520233bf1536
• WEBhttps://huntr.dev/bounties/46881df7-eb41-4ce2-a78f-82de9bc4fc2d