Описание
usememos/memos Improper Authorization vulnerability
In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen.
Пакеты
Наименование
github.com/usememos/memos
go
Затронутые версииВерсия исправления
<= 0.9.0
0.9.1
Связанные уязвимости
CVSS3: 8.3
nvd
около 3 лет назад
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.