VULNERABILITY INTELLIGENCE

CVE-2025-65797

CVSS score7.5 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-12-08
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service (DoS).

Weakness classification

  • CWE-284: Improper Access Control

Primary references