PT-2024-22681 · Memos · Memos

Kevin Stubbings + 1 · Published 2024-04-18 · Updated 2025-07-07 · CVE-2024-29028

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions memos versions 0.13.2 through 0.16.0

Description The issue is related to a Server-Side Request Forgery (SSRF) vulnerability. It exists at the "/o/get/httpmeta" API endpoint, allowing unauthenticated users to enumerate the internal network and receive limited HTML values in JSON form.

Recommendations For memos versions 0.13.2 through 0.16.0, update to version 0.16.1 to resolve the issue. As a temporary workaround, consider restricting access to the "/o/get/httpmeta" API endpoint until the update is applied.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-29028

GHSA-6FCF-G3MP-XJ2X

GO-2024-3047

Affected Products

Memos

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29028.json · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos · Exploit
• https://github.com/usememos/memos/commit/6ffc09d86a1302c384ef085aa70c7bddb3ce7ba9 · Patch
• https://osv.dev/vulnerability/CVE-2024-29028 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-3047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29028 · Security Note
• https://osv.dev/vulnerability/GHSA-6fcf-g3mp-xj2x · Vendor Advisory
• https://github.com/usememos/memos · Note
• https://twitter.com/GHSecurityLab/status/1781000239316451670 · Twitter Post
• https://t.me/cvenotify/77448 · Telegram Post
• https://github.com/advisories/GHSA-6fcf-g3mp-xj2x · Note
• https://t.me/cvenotify/77468 · Telegram Post
• https://t.me/cvenotify/127853 · Telegram Post