Skip to content
OpenAdvisories

Product · MatiasDesuu

ThinkDashboard

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-64177

    ThinkDashboard: Stored XSS in Dashboard via Malicious Bookmark

    ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, there is a stored Cross-Site Scripting (XSS) vulnerability in the dashboard, which can exploited when a user clicks on a malicious bookmark, …

    MatiasDesuu ThinkDashboard
  • Medium 5.3
    CVE-2025-64176

    ThinkDashboard: Arbitrary File Upload vulnerability in the Backup Import Feature

    ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, an attacker can upload any file they wish to the /data directory of the web application via the backup import feature. When importing a backu…

    MatiasDesuu ThinkDashboard
  • Medium 5.3
    CVE-2025-64327

    ThinkDashboard: Blind Server-Side Request Forgery (SSRF) vulnerability in /api/ping Endpoint

    ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. Versions 0.6.7 and below contain a Blind Server-Side Request Forgery (SSRF) vulnerability, in its `/api/ping?url= endpoint`. This allows an attacker to make arbitrary req…

    MatiasDesuu ThinkDashboard