CVE-2023-0108

Description

usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

How to fix CVE-2023-0108

To remediate CVE-2023-0108, upgrade the affected package to a fixed version below.

• Go/github.com/usememos/memos—upgrade to 0.10.0 or later
• Go/github.com/usememos/memos—upgrade to 0.10.0 or later

Is CVE-2023-0108 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.10.0
• from 0, < 0.10.0

CVSS scores

References (5)

• ADVISORYgithub.com/advisories/GHSA-fpjc-cxr6-w6h8
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-0108
• PATCHgithub.com/usememos/memos
• WEBgithub.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c
• WEB