⤷ Title: High-Severity Memos Flaw (CVE-2024-21635) Allows Hackers to Stay Logged In After Password Change
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 01:48:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Token #CVE_2024_21635 #Memos #Session Management #Token Invalidation #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 01:48:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Token #CVE_2024_21635 #Memos #Session Management #Token Invalidation #Vulnerability
Daily CyberSecurity
High-Severity Memos Flaw (CVE-2024-21635) Allows Hackers to Stay Logged In After Password Change
A High-severity flaw (CVE-2024-21635) in Memos fails to invalidate Access Tokens upon password change, allowing attackers to maintain access to the knowledge base. Update to v0.25.2.