Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-22952

39
FAUCET Score

CVE-2025-22952 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting elestio memos v0.23.0 and earlier versions, stemming from insufficient validation of user-supplied URLs. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low complexity, allowing for high impact to confidentiality, integrity, and availability. While not currently listed in CISA's KEV catalog or showing active exploitation, public Nuclei templates exist, indicating readily available exploit code, though community discussion and media coverage remain minimal.

Impacted Technologies

VendorProductVersion(s)CPE
0.23.0CPE matchmatch criteria
cpe:2.3:a:usememos:memos:0.23.0:-:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.82%
Probability of exploitation in next 30 days
EPSS Percentile
85.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Nuclei: CVE-2025-22952 · Mar 4, 2025
This CVE's current EPSS score of 0.0282 is in the 76th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
nodejspatch availablevia llm_extracted
Fixed in: 9.4.3, 9.3.5, 9.2.7, 9.1.10

Vendor Advisories (2)

nodejsllm-nodejs-b263506120f02d37CRITICAL

Third-Party Package Updates in Splunk Enterprise - July 2025

Jul 7, 2025
goGHSA-wfxg-v3j4-7qmjmedium

Memos Server-Side Request Forgery (SSRF)

Feb 27, 2025

References

elest.io / open-source/memos
Product
github.com / usememos/memos
Product
github.com / usememos/memos/issues/4413
ExploitIssue TrackingVendor Advisory
github.com / usememos/memos/pull/4428
Issue TrackingPatch