CVE-2022-4796

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-648

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-479657.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary codeCVE-2022-479669.8Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache SanCVE-2022-479677.8A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability thaCVE-2022-479685.4Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via "Application name" to the "Add application" page. The storeCVE-2022-47974.3Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-479746.5The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the BlueCVE-2022-479757.5The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system availability.CVE-2022-479767.5The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of thisCVE-2022-479777.8A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0). The affected applicationCVE-2022-47985.3Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-479835.4IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript CVE-2022-479849.8IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which
CVE-2022-4796: High severity, CVSS 8.1 | Vulnix