En bref
- CVE-2023-0109 est une vulnérabilité MOYENNE (CVSS 5.4) touchant github.com/usememos/memos, memos (usememos).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.46%, plus élevée que 40.1% des vulnérabilités.
- Correctif : mettre à jour vers 0.10.0 ou plus récent.
Description
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.
NVD description
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.
Autres vulnérabilités de github.com/usememos/memos
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free