Skip to content
OpenAdvisories

Vendor

Linkding

1 known vulnerabilities.

Products

LinkDing 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-14202

    Cross-Site Request Forgery (CSRF) Leading to Account Takeover via SVG File Upload

    A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content. When an authenticated admin user views the SVG file with embedded JavaScript code of shared bookmark, JavaScri…

    Linkding LinkDing