CVE-2023-5036

Description

Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

How to fix CVE-2023-5036

To remediate CVE-2023-5036, upgrade the affected package to a fixed version below.

• Go/github.com/usememos/memos—upgrade to 0.15.1 or later
• Go/github.com/usememos/memos—upgrade to 0.15.1 or later

Is CVE-2023-5036 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.15.1
• from 0, < 0.15.1

CVSS scores

References (5)

• ADVISORYgithub.com/advisories/GHSA-2g7r-9xq5-c6hv
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-5036
• PATCHgithub.com/usememos/memos
• WEBgithub.com/usememos/memos/commit/97b434722cf0abe3cfcad5ac9e3d520233bf1536
• WEB