GHSA-33m8-f4hw-wm3q

usememos/memos Denial of Service vulnerability

En bref

Publiée: 2022-12-27 15:30 UTC
Mise à jour: 2024-08-21 16:28 UTC
CVE: CVE-2022-4767
Alias: GO-2022-1219
CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Denial of Service in GitHub repository usememos/memos 0.9.0 and prior. A patch is available on the `main` branch at commit number f888c628408501daf639de07b90a72ab443b0f4c.

Paquets affectés

Paquet	Versions
Go · github.com/usememos/memos	introduced 0, fixed 0.9.1

Références

https://nvd.nist.gov/vuln/detail/CVE-2022-4767 ADVISORY
https://github.com/usememos/memos/commit/f888c628408501daf639de07b90a72ab443b0f4c WEB
https://github.com/usememos/memos PACKAGE
https://huntr.dev/bounties/75b4a085-923c-4ecc-bbf6-e049290db502 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database