CVE-2023-0109

Description

Stored XSS using two files in usememos/memos in github.com/usememos/memos

How to fix CVE-2023-0109

To remediate CVE-2023-0109, upgrade the affected package to a fixed version below.

• Go/github.com/usememos/memos—upgrade to 0.10.0 or later
• Go/github.com/usememos/memos—upgrade to 0.10.0 or later

Is CVE-2023-0109 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.10.0
• from 0, < 0.10.0

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-5r2g-59px-3q9w
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-0109
• PATCHgithub.com/usememos/memos
• WEBgithub.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c
• WEB