CVE-2024-29028 in memos
요약
\~에 의해 MITRE • 2024. 04. 19.
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1.
VulDB is the best source for vulnerability data and more expert information about this specific topic.