CVE-2022-4797

CVSS V2 None CVSS V3 None

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.

Overview

CVE ID
CVE-2022-4797

Assigner
security@huntr.dev

Vulnerability Status
Analyzed

Published Version
2022-12-28T14:15:10

Last Modified Date
2023-01-05T21:34:16

Weakness Enumerations

CWE	URL
CWE-307	http://cwe.mitre.org/data/definitions/307.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:usememos:memos::::::::	1	OR		0.9.1

References

Reference URL	Reference Tags
https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53
https://huntr.dev/bounties/5233f76f-016b-4c65-b019-2c5d27802a1b

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-4797
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4797

History

Created	Old Value	New Value	Data Type	Notes
2022-12-28 15:14:52				Added to TrackCVE
2022-12-28 15:14:53			Weakness Enumeration	new
2022-12-31 04:17:33	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2022-12-31 04:17:36			CVSS V3 information	new
2023-01-05 22:19:04		2023-01-05T21:34:16	CVE Modified Date	updated
2023-01-05 22:19:04	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-01-05 22:19:07			CPE Information	updated
2023-01-05 22:19:07			CVSS V3 information	new