CVE-2022-4848

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-940

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484807.5Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2022-484817.8In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleCVE-2022-484827.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /ElectrCVE-2022-484837.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dowCVE-2022-484867.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484877.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484885.3Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifiCVE-2022-484897.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-48496.5Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484907.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484915.3Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other winCVE-2022-484927.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
CVE-2022-4848: Medium severity, CVSS 5.7 | Vulnix