What is GHSA-v92p-phmp-xffr?

GHSA-v92p-phmp-xffr is a security advisory published by GitHub Security Advisories with Medium severity. usememos/memos vulnerable to stored Cross-site Scripting

Which CVE IDs does GHSA-v92p-phmp-xffr cover?

GHSA-v92p-phmp-xffr covers the following CVE IDs: CVE-2022-4694. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v92p-phmp-xffr?

GHSA-v92p-phmp-xffr has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-v92p-phmp-xffr?

GHSA-v92p-phmp-xffr affects 1 product, including: go/github.com/usememos/memos:\u003c 0.9.0.

GHSA-v92p-phmp-xffrMediumCVSS 5.4

usememos/memos vulnerable to stored Cross-site Scripting

Vendor

GitHub Security Advisories

Published

December 27, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-4694 →

📋 Description

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.

🎯 Affected products1

go/github.com/usememos/memos:< 0.9.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-4694
https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e
https://huntr.dev/bounties/a4d865c2-1a2b-4e3a-aaae-915b0dfc3f22
https://github.com/advisories/GHSA-v92p-phmp-xffr