Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
h to fix this issue. The identifier of this vulnerability is VDB-216988. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216988 - https://vuldb.com/?ctiid.216988 - https://github.com/centic9/jgit-cookbook/pull/86 - https://github.com/centic9/jgit-cookbook/commit/b8cb29b43dc704708d598c60ac1881db7cf8e9c3
CVE ID: CVE-2022-4818 State: PUBLISHED Published: 2022-12-28T20:34:17.264Z Last Updated: 2025-04-09T20:49:13.060Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Talend Products: Open Studio for MDM Problem Types: CWE-611 Description: A vulnerability was found in Talend Open Studio for MDM. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file org.talend.mdm.core/src/com/amalto/core/storage/SystemStorageWrapper.java. The manipulation leads to xml external entity reference. Upgrading to version 20221220_1938 is able to address this issue. The name of the patch is 95590db2ad6a582c371273ceab1a73ad6ed47853. I
ersion 20221220_1938 is able to address this issue. The name of the patch is 95590db2ad6a582c371273ceab1a73ad6ed47853. It is recommended to upgrade the affected component. The identifier VDB-216997 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216997 - https://vuldb.com/?ctiid.216997 - https://github.com/Talend/tmdm-server-se/pull/1598 - https://github.com/Talend/tmdm-server-se/commit/95590db2ad6a582c371273ceab1a73ad6ed47853 - https://github.com/Talend/tmdm-server-se/releases/tag/snap%2Fmaster%2F20221220_1938
CVE ID: CVE-2022-4819 State: PUBLISHED Published: 2022-12-28T20:40:25.191Z Last Updated: 2024-08-03T01:55:44.210Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: HotCRP Problem Types: CWE-79 Description: A vulnerability was found in HotCRP. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is d4ffdb0ef806453c54ddca7fdda3e5c60356285c. It is recommended to apply a patch to fix this issue. VDB-216998 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
VDB-216998 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216998 - https://vuldb.com/?ctiid.216998 - https://github.com/kohler/hotcrp/commit/d4ffdb0ef806453c54ddca7fdda3e5c60356285c
CVE ID: CVE-2022-4820 State: PUBLISHED Published: 2022-12-28T20:42:48.276Z Last Updated: 2024-08-03T01:55:45.454Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: FlatPress Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 229752b51025e678370298284d42f8ebb231f67f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is
42f8ebb231f67f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216999. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.216999 - https://vuldb.com/?ctiid.216999 - https://github.com/flatpressblog/flatpress/issues/180 - https://github.com/flatpressblog/flatpress/commit/229752b51025e678370298284d42f8ebb231f67f
CVE ID: CVE-2022-4821 State: PUBLISHED Published: 2022-12-28T20:45:48.557Z Last Updated: 2024-08-03T01:55:45.551Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: FlatPress Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this
s 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217000. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217000 - https://vuldb.com/?ctiid.217000 - https://github.com/flatpressblog/flatpress/issues/178 - https://github.com/flatpressblog/flatpress/commit/3cc223dec5260e533a84b5cf5780d3a4fbf21241
CVE ID: CVE-2022-4822 State: PUBLISHED Published: 2022-12-28T20:47:21.360Z Last Updated: 2024-08-03T01:55:45.765Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: n/a Products: FlatPress Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1. It is recommended to apply a patch to fix this issue. The identifier VDB-217001 was assigned to this vulnerabi
26f9fed1. It is recommended to apply a patch to fix this issue. The identifier VDB-217001 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217001 - https://vuldb.com/?ctiid.217001 - https://github.com/flatpressblog/flatpress/issues/176 - https://github.com/flatpressblog/flatpress/commit/5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1
CVE ID: CVE-2022-4823 State: PUBLISHED Published: 2022-12-28T20:51:52.481Z Last Updated: 2024-11-19T19:44:40.049Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: InSTEDD Products: Nuntium Problem Types: CWE-208 Description: A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controllers/geopoll_controller.rb. The manipulation of the argument signature leads to observable timing discrepancy. It is possible to launch the attack remotely. The name of the patch is 77236f7fd71a0e2eefeea07f9866b069d612cf0d. It is recommended to apply a patch to fix this issue. VDB-217002 is the identifier
6f7fd71a0e2eefeea07f9866b069d612cf0d. It is recommended to apply a patch to fix this issue. VDB-217002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217002 - https://vuldb.com/?ctiid.217002 - https://github.com/instedd/nuntium/commit/77236f7fd71a0e2eefeea07f9866b069d612cf0d
CVE ID: CVE-2022-4824 State: PUBLISHED Published: 2023-02-06T19:59:10.841Z Last Updated: 2025-03-26T13:48:50.450Z Vendors: Unknown Products: WP Blog and Widgets Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Blog and Widgets WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9af8e425-c477-4e2b-9445-70f
E Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9af8e425-c477-4e2b-9445-70ffb769f3f0
CVE ID: CVE-2022-4825 State: PUBLISHED Published: 2023-02-06T19:59:18.188Z Last Updated: 2025-03-25T20:40:01.173Z Vendors: Unknown Products: WP-ShowHide Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a2758983-d3a7-4718-b5b8-30169df6780a
CVE ID: CVE-2022-4826 State: PUBLISHED Published: 2023-02-06T19:59:45.565Z Last Updated: 2025-03-25T17:42:12.732Z Vendors: Unknown Products: Simple Tooltips Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/59fa32d2-aa66-4980-9ee5-0a7513f3a2b0
CVE ID: CVE-2022-4827 State: PUBLISHED Published: 2023-04-10T13:18:05.722Z Last Updated: 2025-04-23T16:22:31.560Z Vendors: Unknown Products: WP Tiles Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f2a922ac-6bc9-4caa-b1cc-9ca9cff4bd51
CVE ID: CVE-2022-4828 State: PUBLISHED Published: 2023-01-30T20:31:31.563Z Last Updated: 2025-03-27T20:42:28.671Z Vendors: Unknown Products: Bold Timeline Lite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/06e1d63e-576b-4e16-beb7-4f0bf
Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/06e1d63e-576b-4e16-beb7-4f0bfb85e948
CVE ID: CVE-2022-4829 State: PUBLISHED Published: 2023-02-27T15:24:29.354Z Last Updated: 2025-03-10T18:10:46.305Z Vendors: Unknown Products: Show-Hide / Collapse-Expand Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57e528ce-ec
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57e528ce-ec8c-4734-8903-926be36f91e7
CVE ID: CVE-2022-4830 State: PUBLISHED Published: 2023-02-13T14:32:30.964Z Last Updated: 2024-10-01T15:49:46.789Z Vendors: Unknown Products: Paid Memberships Pro Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Paid Memberships Pro WordPress plugin before 2.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ae103336-a411-4ebf-a5f0-2
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ae103336-a411-4ebf-a5f0-2f35701e364c
CVE ID: CVE-2022-4831 State: PUBLISHED Published: 2023-01-30T20:31:55.705Z Last Updated: 2025-03-27T15:37:54.123Z Vendors: Unknown Products: Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program
ripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/872fc8e6-4035-4e5a-9f30-16c482c48c7c
CVE ID: CVE-2022-4832 State: PUBLISHED Published: 2023-01-23T14:31:22.236Z Last Updated: 2025-04-02T15:54:35.578Z Vendors: Unknown Products: Store Locator WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Store Locator WordPress plugin before 1.4.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/735a33e1-63fb-4f17-812c-3e687
Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/735a33e1-63fb-4f17-812c-3e68709b5c2c
CVE ID: CVE-2022-4833 State: PUBLISHED Published: 2023-02-06T19:59:18.984Z Last Updated: 2025-03-25T20:39:19.473Z Vendors: Unknown Products: YourChannel: Everything you want in a YouTube plugin. Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35ba38cf-4f23-4344-8de3-cf3004ebf84c
CVE ID: CVE-2022-4834 State: PUBLISHED Published: 2023-01-30T20:31:39.463Z Last Updated: 2025-03-27T20:04:46.019Z Vendors: Unknown Products: CPT Bootstrap Carousel Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6183318f-0230-47a1-87
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6183318f-0230-47a1-87f2-3c5aaef678a5
CVE ID: CVE-2022-4835 State: PUBLISHED Published: 2023-01-30T20:31:40.299Z Last Updated: 2025-03-27T20:03:34.273Z Vendors: Unknown Products: Social Sharing Toolkit Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/23c22f46-19a2-4a1a-aae
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/23c22f46-19a2-4a1a-aaef-0a4007eda031
CVE ID: CVE-2022-4836 State: PUBLISHED Published: 2023-02-06T19:59:38.833Z Last Updated: 2025-03-25T18:06:01.043Z Vendors: Unknown Products: Breadcrumb Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e9a228dc-d32e-4918-898d-4d7af4662a14
CVE ID: CVE-2022-4837 State: PUBLISHED Published: 2023-01-30T20:31:48.836Z Last Updated: 2025-03-27T19:21:45.193Z Vendors: Unknown Products: CPO Companion Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/41abeacb-ef3e-4621-89bb-df0f2eb617da
CVE ID: CVE-2022-4838 State: PUBLISHED Published: 2023-02-06T19:59:19.786Z Last Updated: 2025-03-25T20:38:05.060Z Vendors: Unknown Products: Clean Login Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9937e369-60e8-451c-8790-1a83a59115fc
CVE ID: CVE-2022-4839 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-09T15:48:27.023Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8 - https://huntr.dev/bounties/ad954cab-f026-4895-8003-99f5e3b507ed
CVE ID: CVE-2022-4840 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-09T15:47:49.561Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8 - https://huntr.dev/bounties/b42aa2e9-c783-464c-915c-a80cb464ee01
CVE ID: CVE-2022-4841 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-09T15:47:26.468Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/fa46b3ef-c621-443a-be3a-0a83fb78ba62 - https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8
CVE ID: CVE-2022-4842 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-08T13:45:09.583Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/ntfs3/784f82c4-de71-b8c3-afd6-468869a369af%40paragon-software.com/T/#t
CVE ID: CVE-2022-4843 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-09T15:47:07.025Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: radareorg Products: radareorg/radare2 Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/075b2760-66a0-4d38-b3b5-e9934956ab7f - https://github.com/radareorg/radare2/commit/842f809d4ec6a12af2906f948657281c9ebc8a24 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOXRDPI3OY
1c9ebc8a24 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOXRDPI3OYYKO4PKXE3XD2IFONL6BCHR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OFCCTYAD7ASNQ23ABCUPAZHEDEIOCW6T/
CVE ID: CVE-2022-4844 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-09T15:15:34.297Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948 - https://huntr.dev/bounties/8e8df1f4-07ab-4b75-aec8-75b1229e93a3
CVE ID: CVE-2022-4845 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-10T16:38:41.219Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948 - https://huntr.dev/bounties/075dbd51-b078-436c-9e3d-7f25cd2e7e1b
CVE ID: CVE-2022-4846 State: PUBLISHED Published: 2022-12-29T00:00:00.000Z Last Updated: 2025-04-10T16:38:21.044Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948 - https://huntr.dev/bounties/38c685fc-7065-472d-a46e-e26bf0b556d3