Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:usememos:memos:0.30.0:*:*:*:*:*:*:*

1 brief RSS
high advisory

Memos Refresh Token Revocation Failure

Memos versions 0.26.0 through 0.30.0 fail to invalidate refresh tokens after a password change, enabling persistent unauthorized access via the RefreshToken RPC.

Memos session-management vulnerability mssql-bypass
1t 1c