Executive brief
memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
Affected products
- Go github.com/usememos/memos
Junglewise Threat Intelligence
CVE-2024-41659: GO-2024-3088 - memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
CVE-2024-41659 · Severity: low · CVSS 3.1 · Published 2024-08-30
Technologies: github.com/usememos/memos (Go). Vendors: Go.
Related threats
- usememos Memos incorrect privilege assignment in UpdateInstanceSetting
- usememos memos path traversal in Attachment service
- usememos memos broken access control in Identity Provider service
- usememos memos incorrect access control in user registration API
- usememos memos incorrect access control in attachments