{"id":"EUVD-2025-201725","enisaUuid":"4b69f485-53cd-3e94-9e4d-4582330e2626","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users\u0027 Memos.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:30 PM","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/security-advisories/usd-2025-0060/\n","aliases":"CVE-2025-65796\nGHSA-8jcj-g9f4-qx42\n","assigner":"mitre","epss":0.2,"enisaIdProduct":[{"id":"6d5ed71d-6240-33c4-9047-adac3176db4a","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"2100ade3-6917-393c-a117-f6d7f617ffec","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"8c66390b-6434-325d-b101-78164c82ee79","vulnerability":{"id":"CVE-2025-65796","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users\u0027 Memos.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:30 PM","status":"PUBLISHED","baseScore":4.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/security-advisories/usd-2025-0060/\n","enisa_id":"EUVD-2025-201725\n","assigner":"mitre","epss":0.2,"dataProcessed":"Nov 4, 2026, 7:19:35 AM","vulnerabilityProduct":[{"id":"9a375b5b-871c-373e-97e2-4618fb1593c0","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"430209b8-cc3e-3972-adb0-9332a5bc6971","vendor":{"name":"n/a"}}]}},{"id":"8df676a3-a3c2-3fbb-8562-7ae3b90e0e6c","vulnerability":{"id":"GHSA-8jcj-g9f4-qx42","description":"memos vulnerability allows arbitrarily reactions deletion","datePublished":"Dec 8, 2025, 6:30:42 PM","dateUpdated":"Dec 17, 2025, 1:10:46 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65796\nhttps://github.com/usememos/memos/pull/5217\nhttps://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c\nhttps://github.com/advisories/GHSA-8jcj-g9f4-qx42\nhttps://github.com/usememos/memos\nhttps://herolab.usd.de/security-advisories/usd-2025-0060\nhttp://memos.com\nhttp://usememos.com\n","enisa_id":"EUVD-2025-201725\n","aliases":"CVE-2025-65796\nGHSA-8jcj-g9f4-qx42\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}