{"id":"EUVD-2025-201723","enisaUuid":"dcd4776a-c058-3588-9924-45a46cdbec71","description":"Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:26 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/usd-2025-0058/\n","aliases":"CVE-2025-65795\nGHSA-mg56-wc4q-rw4w\n","assigner":"mitre","epss":0.26,"enisaIdProduct":[{"id":"9a7f55f0-6f9e-352b-8e97-b619767ada3c","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"ce3c81ec-052b-34da-91e4-257c7e438331","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"01823877-d5e6-30c8-9861-dfb32a0708b4","vulnerability":{"id":"GHSA-mg56-wc4q-rw4w","description":"memos vulnerability allows the creation of arbitrary accounts","datePublished":"Dec 8, 2025, 6:30:44 PM","dateUpdated":"Dec 17, 2025, 1:11:26 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65795\nhttps://github.com/usememos/memos/pull/5217\nhttps://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c\nhttps://github.com/advisories/GHSA-mg56-wc4q-rw4w\nhttps://github.com/usememos/memos\nhttps://herolab.usd.de/usd-2025-0058\nhttp://memos.com\nhttp://usememos.com\n","enisa_id":"EUVD-2025-201723\n","aliases":"CVE-2025-65795\nGHSA-mg56-wc4q-rw4w\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"1f9487e1-07eb-3b94-a0d6-f26cfe9ce3f8","vulnerability":{"id":"CVE-2025-65795","description":"Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:26 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/usd-2025-0058/\n","enisa_id":"EUVD-2025-201723\n","assigner":"mitre","epss":0.26,"dataProcessed":"Oct 29, 2026, 7:19:45 AM","vulnerabilityProduct":[{"id":"e40e0f0c-a493-3cd0-928b-8fc63ac7e551","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"784a104d-f8b9-3bfe-8bbe-ecee8f8416fb","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[]}