GHSA-qrrf-xvcf-p64qMediumCVSS 4.3

usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts

Published
December 28, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

📋 Description

In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force.

🎯 Affected products1

  • go/github.com/usememos/memos:<= 0.9.0

🔗 References (4)