Lucene search
+L

877 matches found

OSV
OSV
•added 2025/03/03 7:22 p.m.•16 views

GO-2025-3492 Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

Memos Server-Side Request Forgery SSRF in github.com/usememos/memos...

9.8CVSS9.5AI score0.02932EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2025/02/27 9:32 p.m.•25 views

Memos Server-Side Request Forgery (SSRF)

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS6.9AI score0.02932EPSS
SaveExploits1References9Affected Software1
NVD
NVD
•added 2025/02/27 8:16 p.m.•21 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS0.02932EPSS
SaveExploits1References4
Mend
Mend
•added 2025/02/27 12:00 a.m.•2 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS0.02932EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/27 12:00 a.m.•2 views

CVE-2025-22952: Server-Side Request Forgery (SSRF)

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS6AI score0.02932EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/27 12:00 a.m.•31 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

0.02932EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/02/27 12:00 a.m.•23 views

Memos 安全漏洞

Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos version 0.23.0 that stems from insufficient user-supplied URL validation, which could lead to an SSRF attack...

9.8CVSS6.3AI score0.02932EPSS
SaveExploits1References4
OSV
OSV
•added 2025/02/27 12:00 a.m.•15 views

CVE-2025-22952

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks...

9.8CVSS6.1AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•14 views

PT-2025-9016 · Elestio · Elestio Memos

Name of the Vulnerable Software and Affected Versions: elestio memos version 0.23.0 Description: The issue is related to Server-Side Request Forgery SSRF due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks. This vulnerability allows attackers to...

9.9CVSS5.9AI score0.9384EPSS
SaveExploits21References51
RedhatCVE
RedhatCVE
•added 2025/02/05 8:23 p.m.•13 views

CVE-2022-4814

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.7AI score0.0055EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:22 p.m.•13 views

CVE-2022-4805

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

7.3CVSS6.8AI score0.00521EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:22 p.m.•13 views

CVE-2022-4841

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS5.8AI score0.00619EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:22 p.m.•13 views

CVE-2022-4863

Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1...

8.4CVSS6.7AI score0.00698EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:21 p.m.•8 views

CVE-2022-4809

Improper Access Control in GitHub repository usememos/memos prior to 0.9.1...

8.8CVSS6.7AI score0.00938EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:21 p.m.•13 views

CVE-2022-4799

Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1...

8.6CVSS6.7AI score0.00784EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:20 p.m.•17 views

CVE-2022-4847

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

8.3CVSS6.6AI score0.0066EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:19 p.m.•10 views

CVE-2022-4689

Improper Access Control in GitHub repository usememos/memos prior to 0.9.0...

8.8CVSS6.7AI score0.00763EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:18 p.m.•13 views

CVE-2022-4767

Denial of Service in GitHub repository usememos/memos prior to 0.9.1...

7.6CVSS6.6AI score0.00697EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:18 p.m.•12 views

CVE-2022-4866

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

9.8CVSS5.8AI score0.00991EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:18 p.m.•12 views

CVE-2022-4695

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...

7.6CVSS5.8AI score0.00671EPSS
SaveExploits1
Rows per page
Query Builder