This vulnerability affects the usememos memos application, specifically versions 0.22.0 and 0.22.1. The issue lies in the memos_access_token function of the src/App.tsx file, where improper authorization occurs due to manipulation of the additionalStyle/additionalScript arguments. This flaw allows an attacker to bypass intended access controls remotely. The CVSS 4.0 base score is 5.3, indicating medium severity. The vendor was notified but has not issued a fix or advisory, and no patch links are available. Exploit code has been publicly released, increasing the risk of potential attacks.

Successful exploitation could allow an attacker to bypass authorization controls remotely, potentially leading to unauthorized access or modification of memo settings or content. The exact scope of impact beyond improper authorization is not detailed. There are no confirmed reports of active exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's channels for updates. Until a fix is released, consider restricting network access to the affected application and applying additional access controls where possible to mitigate unauthorized remote exploitation.