Elestio · Elestio Memos · CVE-2025-22952
**Name of the Vulnerable Software and Affected Versions**
elestio memos version 0.23.0
**Description**
The issue is related to insufficient validation of user-supplied URLs, which can be exploited to perform Server-Side Request Forgery (SSRF) attacks.
**Recommendations**
For version 0.23.0, consider validating user-supplied URLs to prevent SSRF attacks. As a temporary workaround, restrict access to sensitive areas of the server that could be exploited through SSRF until a patch is available.