← Back to browse · API

CVE-2025-22952

Severity
CRITICAL
CVSS
9.8
EPSS
0.0285
Risk score
40.2
CISA KEV
No
PoC
No
Published
2025-02-27
Modified
2025-03-03
First seen
2026-08-07
Aliases
EUVD-2025-5566, GHSA-WFXG-V3J4-7QMJ
Products
n/a:n/a n/a
Sources
euvd EUVD-2025-5566

Description

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.

References