CVE-2025-65795

In usememos memos up to 0.22.1, the function memos_access_token in src/App.tsx of the UpdateInstanceSetting component allows manipulation of the additionalStyle/additionalScript arguments, causing improper authorization. The attack can be carried out remotely, and the exploit has been made public. The vendor did not respond.

In the Attachment service of usememos memos v0.25.2, a lack of file name validation allows attackers to perform a path traversal. This vulnerability enables access to files outside the intended directory.

An incorrect access control vulnerability in the Identity Provider service of usememos memos v0.25.2 allows low-privileged attackers to arbitrarily modify or delete registered identity providers. This can lead to account takeover or Denial of Service (DoS).

In usememos memos version 0.25.2, incorrect access control allows attackers with low-level privileges to arbitrarily modify or delete attachments created by other users.

In usememos memos version 0.25.2, an incorrect access control allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.

Improper input validation exists in the GitHub repository usememos/memos prior to version 0.13.2.

Improper Privilege Management exists in the GitHub repository usememos/memos prior to version 0.13.2.