CVE-2023-4696: Improper Access Control

September 1, 2023

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

References

github.com/advisories/GHSA-j2gj-g3p9-7mrr
github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd
huntr.dev/bounties/4747a485-77c3-4bb5-aab0-21253ef303ca
nvd.nist.gov/vuln/detail/CVE-2023-4696

Code Behaviors & Features

Detect and mitigate CVE-2023-4696 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →