CVE-2023-4697
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
Improper Privilege Management exists in the GitHub repository usememos/memos prior to version 0.13.2.
Risk Assessment
Improper privilege management may lead to unauthorized access to application data or functions, posing a security risk to the organization.
Recommendation
It is recommended to upgrade to version 0.13.2 or later to mitigate this vulnerability.
Other vulnerabilities in usememos/memos
See all- CVE-2025-65799Medium
In the Attachment service of usememos memos v0.25.2, a lack of file name validation allows attackers to perform a path traversal. This vulnerability enables access to files outside the intended directory.
- CVE-2025-65797Medium
An incorrect access control vulnerability in the Identity Provider service of usememos memos v0.25.2 allows low-privileged attackers to arbitrarily modify or delete registered identity providers. This can lead to account takeover or Denial of Service (DoS).
- CVE-2025-65795High
An incorrect access control vulnerability in usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request to the /api/v1/user endpoint.
- CVE-2025-65798Medium
In usememos memos version 0.25.2, incorrect access control allows attackers with low-level privileges to arbitrarily modify or delete attachments created by other users.
- CVE-2025-65796Medium
In usememos memos version 0.25.2, an incorrect access control allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.
- CVE-2023-4698High
Improper input validation exists in the GitHub repository usememos/memos prior to version 0.13.2.
Original NVD description (English source)
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.