CVE-2025-65795 PUBLISHED CVSS 7.5 HIGH

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.

EPSS 0.05% · 14.5th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.05%
14.5th percentile

Affected Products

VendorProductVersions
github.comusememos/memos0
n/an/an/a
usememosmemos0.25.2

Timeline

References

Open in Interactive Console →