github.com/usememos/memos is vulnerable to insecure direct object references. Improper Authorization due to insecure direct object references allow an attacker to trigger the `Reset` API on user’s behalf.Read More
Insecure Direct Object References(IDOR)

