CVE-2022-4734

Katalog CVE

CVSS 4.3 · Medium EPSS 0,80%

Kerentanan Improper Removal of Sensitive Information Before Storage or Transfer pada usememos memos. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.

Rincian

Terbit di NVD

27 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer

EPSS (30 hari)

0,80% peluang dieksploitasi; lebih tinggi dari 55,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/usememos/memos/commit/05b41804e33a34102f1f75bb2d69195dda6a1210 patch · advisory pihak ketiga
• https://huntr.dev/bounties/4b4421dc-73af-4dec-884c-836f9732cb5b exploit · advisory pihak ketiga