Tiemio

**Name of the Vulnerable Software and Affected Versions** Memos versions up to v0.24.3 **Description** The Memos application allows embedding of markdown images with arbitrary URLs. Viewing a memo containing such an image causes the user's browser to automatically fetch the image URL, potentially disclosing the user's IP address, browser User-Agent string, and other request-specific information to an attacker-controlled server. This can lead to information disclosure and user tracking. **Recommendations** Versions prior to v0.24.4: Avoid embedding markdown images with arbitrary URLs.