CVE-2022-4850

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-485007.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-485017.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-485027.1An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leadiCVE-2022-485038.8The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS MontereyCVE-2022-485045.5The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiCVE-2022-485055.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected partCVE-2022-485062.4A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners aCVE-2022-485077.5Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect servicCVE-2022-485087.5Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.CVE-2022-485095.9Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulCVE-2022-48515.3Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-485109.8Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.
CVE-2022-4850: Medium severity, CVSS 6.5 | Vulnix