CVE-2025-64327 | MatiasDesuu ThinkDashboard up to 0.6.7 /api/ping url server-side request forgery (GHSA-p52r-qq3j-8p78)

November 7, 2025 Yanac

A vulnerability labeled as critical has been found in MatiasDesuu ThinkDashboard up to 0.6.7. This vulnerability affects unknown code of the file /api/ping. The manipulation of the argument url results in server-side request forgery.

This vulnerability was named CVE-2025-64327. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More