First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2022-4866

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
usememos	usememos/memos	>= unspecified, < 0.9.1

References

https://github.com/usememos/memos/commit/7670c9536000bb32c6345d4906a91268dcddd5fcPatch, Third Party Advisory
https://huntr.dev/bounties/39c04778-6228-4f07-bdd4-ab17f246dbffExploit, Third Party Advisory
https://github.com/usememos/memos/commit/7670c9536000bb32c6345d4906a91268dcddd5fcPatch, Third Party Advisory
https://huntr.dev/bounties/39c04778-6228-4f07-bdd4-ab17f246dbffExploit, Third Party Advisory

Timeline

Published: Dec 31, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-486605.5In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully CVE-2022-486615.5In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If c CVE-2022-486627.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915_gem_context.link under ref protection i CVE-2022-486635.5In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We no CVE-2022-486645.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Of CVE-2022-486655.5In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for se CVE-2022-486669.8In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implemen CVE-2022-486673.3In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn CVE-2022-486683.3In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range d CVE-2022-486695.5In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in papr_get_attr() `buf` is all CVE-2022-48674.3Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.CVE-2022-486707.8In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() When auxiliary_device_