CNNVD-202511-482 Information

CNNVD ID

CNNVD-202511-482

CVE-2025-64177

  • CNNVD Published: 2025-11-06

Description (Chinese)

ThinkDashboard是MatiasDesu个人开发者的一个轻量级的、自托管的书签仪表板。 ThinkDashboard 0.6.7及之前版本存在跨站脚本漏洞,该漏洞源于缺少方案过滤,可能导致存储型跨站脚本攻击。

Description (English)

ThinkDashboard is a lightweight, self-hosted bookmark dashboard for Matias Desu personal developers. ThinkDashboard 0.6.7 and earlier versions had a cross-site script loophole, which stemmed from a lack of programme filters and could lead to storage-type cross-site script attacks.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2025-11-06

Last Modified

2026-02-24

References

https://github.com/MatiasDesuu/ThinkDashboard/commit/16976263b22a4b0526b2c7c30294cc099258edae https://github.com/MatiasDesuu/ThinkDashboard/security/advisories/GHSA-57f2-rhxm-fjv3

Patch

https://github.com/MatiasDesuu/ThinkDashboard/releases

Share on: