[github.com/usememos/memos] usememos/memos Improper Access Control vulnerability

An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others’ public and private memos.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-4806
• https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53
• https://huntr.dev/bounties/2c7101bc-e6d8-4cd0-9003-bc8d86f4e4be
• https://github.com/advisories/GHSA-pp3p-6jjh-rmg7