Memos - SSRF (CVE-2024-29030)
Description
Memos is a privacy-first, lightweight note-taking service. In Memos 0.13.2, an SSRF vulnerability exists at the /api/resource that allows authenticated users to enumerate the internal network. Version 0.22.0 of memos removes the vulnerable file.
psychologyCrowdSec Analysis
CVE-2024-29030 is a server-side request forgery (SSRF) vulnerability in Memos version 0.13.2, which allows authenticated users to probe and enumerate internal network resources via the /api/resource endpoint. Attackers exploiting this flaw could potentially map internal infrastructure, increasing the risk of further targeted attacks.
CrowdSec has been tracking this vulnerability and its exploits since 24th of September 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2024-29030 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the /o/get/resource endpoint by supplying a crafted url parameter to trigger server-side requests, enabling enumeration of internal network resources.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-04-19 |
| Rule Released | 2025-09-24 |
| CrowdSec First Seen | 2025-09-26 |
Remediation & Protection
External References
- https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos/
- https://github.com/usememos/memos/blob/06dbd8731161245444f4b50f4f9ed267f7c3cf63/api/v1/resource.go#L83
- https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c549641455892b9eb5
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29030.yaml