Skip to content
Connect AISign inSign up free
CVE-2025-507389.8CriticalCWE-200

CVE-2025-50738: Usememos Memos vulnerability

Usememos · Memos

Affected: Usememos Memos · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.4%probability of exploitation in the next 30 days
84th percentile
050100

Higher than 84% of scored CVEs

9.8CriticalCVSS 3.1
LowCrit.

DescriptionCVE.org

The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Usememos
Published
July 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-50738 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References