CVE-2022-4849

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

VendorProductVersions
usememosusememos/memos>= unspecified, < 0.9.1

References

Timeline

Published
Dec 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484907.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484915.3Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other winCVE-2022-484927.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484937.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484947.5Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause maCVE-2022-484955.3Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app inCVE-2022-484967.5Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause maCVE-2022-484977.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484987.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484997.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-48506.5Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-485007.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
CVE-2022-4849: Medium severity, CVSS 6.5 | Vulnix