memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.
References
Configurations
History
02 Jan 2025, 20:46
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-918 CWE-79 |
|
| First Time |
Usememos
Usememos memos |
|
| CPE | cpe:2.3:a:usememos:memos:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| References | () https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos/ - Exploit, Third Party Advisory | |
| References | () https://github.com/usememos/memos/blob/06dbd8731161245444f4b50f4f9ed267f7c3cf63/api/v1/http_getter.go#L29 - Product | |
| References | () https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c549641455892b9eb5 - Patch |
31 Jul 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file. |
19 Apr 2024, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-19 16:15
Updated : 2025-01-02 20:46
NVD link : CVE-2024-29029
Mitre link : CVE-2024-29029
JSON object : View
Products Affected
usememos
- memos