GHSA-w57v-6xp4-rm2v
usememos/memos vulnerable to account takeover due to improper access control
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/usememos/memos | < 0.9.0 | 0.9.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request.
References
External links from the advisory. They lead to third-party sites.