What’s Vulnerable › Vulnerabilities

CVE-2025-22952

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-02-27 · updated 2026-06-17
• Weakness: CWE-918

Description

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.

Affected products

• usememos/memos: 0.23.0

References

• https://elest.io/open-source/memos
• https://github.com/usememos/memos
• https://github.com/usememos/memos/issues/4413
• https://github.com/usememos/memos/pull/4428
• https://github.com/usememos/memos/issues/4413

Get alerted when CVE-2025-22952 or the next vulnerability affects your stack