CVE-2022-4804

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.

• CWE-285

• https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53Patch, Third Party Advisory
• https://huntr.dev/bounties/4ee48a1e-6332-4d95-a360-9c392643c533Exploit, Patch, Third Party Advisory
• https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53Patch, Third Party Advisory
• https://huntr.dev/bounties/4ee48a1e-6332-4d95-a360-9c392643c533Exploit, Patch, Third Party Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4802Authorization Bypass Through User-Controlled Key in GitHub r…5.4
• CVE-2022-48020Vinteo VCC v2.36.4 was discovered to contain a reflected cro…6.1
• CVE-2022-48021A vulnerability in Zammad v5.3.0 allows attackers to execute…9.8
• CVE-2022-48022An issue in the component /api/v1/mentions of Zammad v5.3.0 …4.3
• CVE-2022-48023Insufficient privilege verification in Zammad v5.3.0 allows …4.3
• CVE-2022-4803Authorization Bypass Through User-Controlled Key in GitHub r…8.8
• CVE-2022-4805Incorrect Use of Privileged APIs in GitHub repository usemem…4.3
• CVE-2022-4806Authorization Bypass Through User-Controlled Key in GitHub r…5.3
• CVE-2022-48063GNU Binutils before 2.40 was discovered to contain an excess…5.5
• CVE-2022-48064GNU Binutils before 2.40 was discovered to contain an excess…5.5
• CVE-2022-48065GNU Binutils before 2.40 was discovered to contain a memory …5.5
• CVE-2022-48066An issue in the component global.so of Totolink A830R V4.1.2…9.8