CyberRota Analysis
AI-GeneratedA vulnerability in usememos v0.27.1 allows remote attackers to take over user accounts by exploiting the SignIn handler, where SSO identity verification relies on a controllable identifier rather than a secure binding to the IdP's stable subject claim. This flaw poses a significant risk to any organization utilizing this version of usememos for authentication, particularly those relying on Single Sign-On (SSO) for user access. Organizations should prioritize patching or mitigating this vulnerability to protect against unauthorized account access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/auth_service.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject claim.