CVE-2023-4697 HIGH

CVE-2023-4697: Improper Privilege Management in usememos/memos

Vendor Usememos
Product usememos/memos
Weakness CWE-269
Published September 1, 2023
Last update October 1, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.

Key dates

02Disclosure timeline

September 1, 2023 CVE published
October 1, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-47683 WordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerability CVE-2024-33522 Privilege escalation in Calico CNI install binary CVE-2021-43828 Improper Privilege Management in Patrowl CVE-2026-32106 StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts CVE-2026-6228 Frontend Admin by DynamiApps <= 3.28.36 - Unauthenticated Privilege Escalation via Edit User Form