-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The patches indicate that the vulnerability was due to improper access control in various handlers for memos, resources, and shortcuts. The fixes involved adding checks to ensure that the user performing an action is the creator of the relevant entity.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/usememos/memos | go | <= 0.9.0 | 0.9.1 |