PT-2025-31215 · Memos · Memos

Tiemio · Published 2025-07-29 · Updated 2025-09-18 · CVE-2025-50738

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Memos versions up to v0.24.3

Description The Memos application allows embedding of markdown images with arbitrary URLs. Viewing a memo containing such an image causes the user's browser to automatically fetch the image URL, potentially disclosing the user's IP address, browser User-Agent string, and other request-specific information to an attacker-controlled server. This can lead to information disclosure and user tracking.

Recommendations Versions prior to v0.24.4: Avoid embedding markdown images with arbitrary URLs.

Exploit

Fix

Information Disclosure

XSS

Weakness Enumeration

CWE-200

CWE-79

Related Identifiers

CVE-2025-50738

GHSA-HFCF-79GH-F3JC

GO-2025-3831

OPENSUSE-SU-2025:15434-1

SUSE-SU-2025:02912-1

Affected Products

Memos

References · 49

• 🔥 https://github.com/usememos/memos/issues/4707#issuecomment-2898504237 · Exploit
• 🔥 https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50738 · Security Note
• https://osv.dev/vulnerability/GO-2025-3831 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hfcf-79gh-f3jc · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-50738 · Vendor Advisory
• https://github.com/usememos/memos · Note
• https://github.com/usememos/memos/commit/46d5307d7f210067b46e07400a728fa9095803d9 · Note
• https://suse.com/security/cve/CVE-2025-54996 · Note
• https://suse.com/security/cve/CVE-2025-54997 · Note
• https://twitter.com/pdnuclei_bot/status/1968536704089723178 · Twitter Post
• https://suse.com/security/cve/CVE-2025-8341 · Note
• https://suse.com/security/cve/CVE-2025-5999 · Note