CVE-2025-50738
criticalPriorität · verfolgen · 11EPSS 0.024 · 84. PerzentilExploit · PoCEUUSEPSS · bewertet 2026-10-27
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- tiemio/CVE-2025-50738-PoCStored Cross-Site Scripting in "usememos" via SVGPoC · poc_in_github
betroffene Produkte (3)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-hfcf-79gh-f3jcMemos has Cross-Site Scripting (XSS) Vulnerability in Image URLs2025-07-29ghsa · osvUS
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking.
- GO-2025-3831Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos2025-08-11vendor · osvUS
Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (11)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2025-50738cnnvd
- https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738cnnvd
- https://github.com/usememos/memos/issues/4707#issuecomment-2898504237cnnvd
- https://github.com/usememos/memos/releasesPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2025-50738cnnvd
- https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738enisa_euvd
- https://github.com/usememos/memosenisa_euvd
- https://github.com/usememos/memos/issues/4707#issuecomment-2898504237enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan