search

golang / vulndb

[mirror] The Go Vulnerability Database
Other
560 stars 58 forks source link

x/vulndb: potential Go vuln in github.com/usememos/memos: GHSA-9cqm-mgv9-vv9j #3049

Closed GoVulnBot closed 1 month ago

GoVulnBot commented 1 month ago

Advisory GHSA-9cqm-mgv9-vv9j references a vulnerability in the following Go modules:

Module
github.com/usememos/memos

Description: memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.

References:

Cross references:

See doc/quickstart.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/usememos/memos
      versions:
        - fixed: 0.22.0
      vulnerable_at: 0.21.1
summary: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
cves:
    - CVE-2024-29029
ghsas:
    - GHSA-9cqm-mgv9-vv9j
references:
    - advisory: https://github.com/advisories/GHSA-9cqm-mgv9-vv9j
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-29029
    - fix: https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c549641455892b9eb5
    - web: https://github.com/usememos/memos/blob/06dbd8731161245444f4b50f4f9ed267f7c3cf63/api/v1/http_getter.go#L29
    - web: https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos
source:
    id: GHSA-9cqm-mgv9-vv9j
    created: 2024-08-05T22:03:59.947759636Z
review_status: UNREVIEWED
gopherbot commented 1 month ago

Change https://go.dev/cl/603715 mentions this issue: data/reports: add 20 unreviewed reports

gopherbot commented 1 month ago

Change https://go.dev/cl/603716 mentions this issue: data/reports: add 19 unreviewed reports