{"id":"EUVD-2025-201721","enisaUuid":"60626618-3e60-3baf-be84-1bab811cdb65","description":"A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:43 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/usememos/memos/pull/5218\nhttps://herolab.usd.de/security-advisories/usd-2025-0056/\n","aliases":"CVE-2025-65799\nGHSA-qgjp-5g5x-vhq2\n","assigner":"mitre","epss":0.21,"enisaIdProduct":[{"id":"4f44ecf0-357a-30fd-8d7f-5b72d38d9dab","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"f1ede7e5-8729-3a18-8e17-189470e8413b","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"3ebaaf57-a4ce-3aaa-8a44-fa21e9180b5b","vulnerability":{"id":"CVE-2025-65799","description":"A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:43 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/usememos/memos/pull/5218\nhttps://herolab.usd.de/security-advisories/usd-2025-0056/\n","enisa_id":"EUVD-2025-201721\n","assigner":"mitre","epss":0.21,"dataProcessed":"Nov 4, 2026, 7:19:35 AM","vulnerabilityProduct":[{"id":"eb88db23-e15f-3bce-a908-160a56a30348","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"94040e87-ec01-3360-ba9c-01d7bf560cd6","vendor":{"name":"n/a"}}]}},{"id":"6637098f-3ada-3878-afe0-09a6c839bbad","vulnerability":{"id":"GHSA-qgjp-5g5x-vhq2","description":"memos lacks file name validation or verification","datePublished":"Dec 8, 2025, 6:30:44 PM","dateUpdated":"Dec 17, 2025, 1:11:13 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65799\nhttps://github.com/usememos/memos/pull/5218\nhttps://github.com/usememos/memos/commit/5f57f48673e2054f404b2c5b497a8eaa3690591d\nhttps://github.com/advisories/GHSA-qgjp-5g5x-vhq2\nhttps://github.com/usememos/memos\nhttps://herolab.usd.de/security-advisories/usd-2025-0056\nhttp://memos.com\nhttp://usememos.com\n","enisa_id":"EUVD-2025-201721\n","aliases":"CVE-2025-65799\nGHSA-qgjp-5g5x-vhq2\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}