{"id":"EUVD-2025-201726","enisaUuid":"36376f70-9d3a-3d2a-a537-18dc023766d2","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:38 PM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/security-advisories/usd-2025-0059/\n","aliases":"CVE-2025-65798\nGHSA-8p44-g572-557h\n","assigner":"mitre","epss":0.18,"enisaIdProduct":[{"id":"735ae666-a4f6-3719-bd34-bba19e8baa8a","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"235a5a18-1b25-37e7-81c2-6413cc01ab09","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"0d67f67c-efc2-326a-ae3e-2f7bb195892f","vulnerability":{"id":"CVE-2025-65798","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.","datePublished":"Dec 8, 2025, 12:00:00 AM","dateUpdated":"Jul 5, 2026, 4:12:38 PM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://github.com/usememos/memos/pull/5217\nhttps://herolab.usd.de/security-advisories/usd-2025-0059/\n","enisa_id":"EUVD-2025-201726\n","assigner":"mitre","epss":0.18,"dataProcessed":"Nov 6, 2026, 7:21:05 AM","vulnerabilityProduct":[{"id":"ee60865d-a4f4-32be-827a-e467d2aa691c","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"fe11c5d6-8fe3-34cf-8d49-04c9e282b046","vendor":{"name":"n/a"}}]}},{"id":"c1d35a16-31f9-36b6-98ef-e24ee2f98573","vulnerability":{"id":"GHSA-8p44-g572-557h","description":"memos vulnerability allows arbitrarily modification or deletion of attachments","datePublished":"Dec 8, 2025, 6:30:42 PM","dateUpdated":"Dec 17, 2025, 1:10:57 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65798\nhttps://github.com/usememos/memos/pull/5217\nhttps://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c\nhttps://github.com/advisories/GHSA-8p44-g572-557h\nhttps://github.com/usememos/memos\nhttps://herolab.usd.de/security-advisories/usd-2025-0059\nhttp://memos.com\nhttp://usememos.com\n","enisa_id":"EUVD-2025-201726\n","aliases":"CVE-2025-65798\nGHSA-8p44-g572-557h\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}