Beveiligingsadvies

CVE-2024-29030

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-19 15:13:59
Laatst bijgewerkt 2024-08-02 01:03:51
Toegewezen door GitHub_M
CVSS-score 5.8
Status PUBLISHED

Beschrijving

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /api/resource that allows authenticated users to enumerate the internal network. Version 0.22.0 of memos removes the vulnerable file.