CVE-2024-29029CWE-79CWE-918

memos vulnerable to an SSRF in /o/get/image

Medium · published April 19, 2024

CVSS v3.1
6.1
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01080 · 64.8th percentile
Weaknesses
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'); CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-04-19T15:14Z
EPSS history
Timeline
  • 19 APR 15:14Z
    memos vulnerable to an SSRF in /o/get/image
    cvelistv5