CVE-2025-64327

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-64327
ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Versions 0.6.7 and below contain a Blind Server-Side Request Forgery (SSRF) vulnerability, in its `/api/ping?url= endpoint`. This allows an attacker to make arbitrary requests to internal or external hosts. This can include discovering ports open on the local machine, hosts on the local network, and ports open on the hosts on the internal network. This issue is fixed in version 0.6.8.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edae Patch
https://github.com/MatiasDesuu/ThinkDashboard/releases/tag/0.6.8 Release Notes
https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 Exploit Vendor Advisory
https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 Exploit Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:matiasdesuu:thinkdashboard:*:*:*:*:*:*:*:*
History

21 Nov 2025, 16:40

Type Values Removed Values Added
CPE cpe:2.3:a:matiasdesuu:thinkdashboard:*:*:*:*:*:*:*:*
References () https://github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edae - () https://github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edae - Patch
References () https://github.com/MatiasDesuu/ThinkDashboard/releases/tag/0.6.8 - () https://github.com/MatiasDesuu/ThinkDashboard/releases/tag/0.6.8 - Release Notes
References () https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 - () https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 - Exploit, Vendor Advisory
First Time Matiasdesuu
Matiasdesuu thinkdashboard

06 Nov 2025, 22:15

Type Values Removed Values Added
References () https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 - () https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-p52r-qq3j-8p78 -

06 Nov 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-06 21:15

Updated : 2025-11-21 16:40

NVD link : CVE-2025-64327

Mitre link : CVE-2025-64327

CVE.ORG link : CVE-2025-64327

JSON object : View

Products Affected

matiasdesuu

  • thinkdashboard
CWE
CWE-918

Server-Side Request Forgery (SSRF)