Upstream information
Description
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 8.2 |
Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | Low |
Availability Impact | High |
CVSSv3 Version | 3 |
SUSE Security Advisories:
- SUSE-SU-2024:0319-1, published Fri Feb 2 12:30:05 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA gdb-13.2-3.1 |
SUSE Timeline for this CVE
CVE page created: Wed Dec 28 19:00:26 2022CVE page last modified: Tue Feb 20 20:34:28 2024