onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Onion-site-template Project |
|
No data.
No data.
References
History
Thu, 07 Aug 2025 07:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Onion-site-template Project
Onion-site-template Project onion-site-template |
|
| Vendors & Products |
Onion-site-template Project
Onion-site-template Project onion-site-template |
Wed, 06 Aug 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 06 Aug 2025 00:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd. | |
| Title | onion-site-template tor Secrets Baked Into Image | |
| Weaknesses | CWE-798 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2025-08-05T23:40:46.900Z
Updated: 2025-08-06T20:33:38.316Z
Reserved: 2025-07-31T17:23:33.473Z
Link: CVE-2025-54872
Vulnrichment
Updated: 2025-08-06T16:13:59.120Z
NVD
Status : Awaiting Analysis
Published: 2025-08-06T00:15:31.357
Modified: 2025-08-06T20:23:52.133
Link: CVE-2025-54872
Redhat
No data.