CVE-2022-4807

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.

• CWE-284

• https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53Patch, Third Party Advisory
• https://huntr.dev/bounties/704c9ed7-2120-47ea-aaf0-5fdcbd492954Exploit, Third Party Advisory
• https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53Patch, Third Party Advisory
• https://huntr.dev/bounties/704c9ed7-2120-47ea-aaf0-5fdcbd492954Exploit, Third Party Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48063GNU Binutils before 2.40 was discovered to contain an excess…5.5
• CVE-2022-48064GNU Binutils before 2.40 was discovered to contain an excess…5.5
• CVE-2022-48065GNU Binutils before 2.40 was discovered to contain a memory …5.5
• CVE-2022-48066An issue in the component global.so of Totolink A830R V4.1.2…9.8
• CVE-2022-48067An information disclosure vulnerability in Totolink A830R V4…5.5
• CVE-2022-48069Totolink A830R V4.1.2cu.5182 was discovered to contain a com…7.5
• CVE-2022-48070Phicomm K2 v22.6.534.263 was discovered to contain a command…7.8
• CVE-2022-48071Phicomm K2 v22.6.534.263 was discovered to store the root an…7.5
• CVE-2022-48072Phicomm K2G v22.6.3.20 was discovered to contain a command i…7.8
• CVE-2022-48073Phicomm K2G v22.6.3.20 was discovered to store the root and …7.5
• CVE-2022-48074An issue in NoMachine before v8.2.3 allows attackers to exec…5.3
• CVE-2022-48077Genymotion Desktop v3.3.2 was discovered to contain a DLL hi…7.8