← Database

CVE-2025-22952

CRITICAL CVSS: 9.8 Published: 2025-02-27 Modified: 2026-06-17

Description

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.

Affected Platforms

Usememos Memos

Weakness Type

CWE-918

References