CVE-2022-4692

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Configurations

Configuration 1 (hide)

cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:35

Type Values Removed Values Added
References () https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82 - Patch, Third Party Advisory () https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82 - Patch, Third Party Advisory
References () https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74 - Exploit, Patch, Third Party Advisory () https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74 - Exploit, Patch, Third Party Advisory

Information

Published : 2022-12-23 20:15

Updated : 2024-11-21 07:35


NVD link : CVE-2022-4692

Mitre link : CVE-2022-4692

CVE.ORG link : CVE-2022-4692


JSON object : View

Products Affected

usememos

  • memos
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')