CNNVD-202511-1756 Information

CNNVD ID

CNNVD-202511-1756

CVE-2024-21635

  • CNNVD Published: 2025-11-14

Description (Chinese)

Memos是Memos开源的一个具有知识管理和社交功能的开源自托管备忘录中心。 Memos 0.18.1及之前版本存在安全漏洞,该漏洞源于密码更改后访问令牌未失效,可能导致账户持续被入侵。

Description (English)

Memos is an open-source Memos centre with knowledge management and socialization functions. The Memos 0.18.1 and previous versions had a security loophole, which stemmed from the fact that access to the token had not expired after the password had been changed and could lead to the continued invasion of the account.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Memos

Published

2025-11-14

Last Modified

2026-02-24

References

https://github.com/usememos/memos/security/advisories/GHSA-mr34-8733-grr2 https://access.redhat.com/security/cve/cve-2024-21635

Patch

https://usememos.com/

Share on: