Lucene search
+L

687 matches found

Veracode
Veracode
added 2025/03/06 5:35 a.m.5 views

Server Side Request Forgery (SSRF)

github.com/usememos/memos is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of user-supplied URLs, which allows an attacker to perform SSRF attacks...

9.8CVSS7.1AI score0.02818EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2025/03/03 7:22 p.m.5 views

GO-2025-3492 Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

Memos Server-Side Request Forgery SSRF in github.com/usememos/memos...

9.8CVSS9.5AI score0.02818EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2025/02/27 9:32 p.m.14 views

Memos Server-Side Request Forgery (SSRF)

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS6.9AI score0.02818EPSS
SaveExploits1References9Affected Software1
NVD
NVD
added 2025/02/27 8:16 p.m.17 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS0.02818EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/02/27 12:0 a.m.17 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

0.02818EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.7 views

PT-2025-9016 · Elestio · Elestio Memos

Name of the Vulnerable Software and Affected Versions: elestio memos version 0.23.0 Description: The issue is related to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks. This vulnerability allows attackers to...

9.9CVSS5.9AI score0.9384EPSS
SaveExploits19References51
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.6 views

Memos 安全漏洞

Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos version 0.23.0 that stems from insufficient user-supplied URL validation, which could lead to an SSRF attack...

9.8CVSS6.3AI score0.02818EPSS
SaveExploits1References4
OSV
OSV
added 2025/02/27 12:0 a.m.4 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS6.1AI score0.02818EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/02/05 8:23 p.m.8 views

CVE-2022-4814

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.7AI score0.00534EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:22 p.m.10 views

CVE-2022-4805

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

7.3CVSS6.8AI score0.00507EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:22 p.m.8 views

CVE-2022-4841

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS5.8AI score0.00601EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:22 p.m.9 views

CVE-2022-4863

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

8.4CVSS6.7AI score0.00679EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:21 p.m.6 views

CVE-2022-4809

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.8CVSS6.7AI score0.00911EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:21 p.m.9 views

CVE-2022-4799

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.7AI score0.00762EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:20 p.m.12 views

CVE-2022-4847

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS6.6AI score0.00642EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:19 p.m.6 views

CVE-2022-4689

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

8.8CVSS6.7AI score0.00741EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:18 p.m.10 views

CVE-2022-4767

Denial of Service in GitHub repository usememos/memos prior to 0.9.1...

7.6CVSS6.6AI score0.00678EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:18 p.m.7 views

CVE-2022-4866

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS5.8AI score0.00991EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:18 p.m.7 views

CVE-2022-4695

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

7.6CVSS5.8AI score0.00652EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 8:18 p.m.7 views

CVE-2022-4839

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8CVSS5.8AI score0.00766EPSS
SaveExploits1
Rows per page
Query Builder