Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Joe912693295

#25656of 53,633
9.8Total CVSS
Vulnerabilities · 1
PT-2025-9016
9.8
2025-02-27
Elestio · Elestio Memos · CVE-2025-22952
**Name of the Vulnerable Software and Affected Versions** elestio memos version 0.23.0 **Description** The issue is related to insufficient validation of user-supplied URLs, which can be exploited to perform Server-Side Request Forgery (SSRF) attacks. **Recommendations** For version 0.23.0, consider validating user-supplied URLs to prevent SSRF attacks. As a temporary workaround, restrict access to sensitive areas of the server that could be exploited through SSRF until a patch is available.