CVE-2022-4796

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.

usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

In usememos/memos 0.9.0 and prior, a user with login permission can delete all notes of the whole application via `API DELETE https://demo.usememos.com/api/memo/$idnote`. The vulnerability will lose all user notes data throughout the system, causing damage to user data.

Uso incorrecto de API privilegiadas en el repositorio de GitHub usememos/memos anteriores a 0.9.1.