Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Vessel9817 | onion-site-template | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions |
|---|---|---|---|
| Onion-site-template Project | Onion-site-template | — | — |
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-23660 | onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd. |
Thu, 07 Aug 2025 07:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Onion-site-template Project
Onion-site-template Project onion-site-template |
|
| Vendors & Products |
Onion-site-template Project
Onion-site-template Project onion-site-template |
Wed, 06 Aug 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 06 Aug 2025 00:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd. | |
| Title | onion-site-template tor Secrets Baked Into Image | |
| Weaknesses | CWE-798 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2025-08-06T20:33:38.316Z
Reserved: 2025-07-31T17:23:33.473Z
Link: CVE-2025-54872
Vulnrichment
Updated: 2025-08-06T16:13:59.120Z
NVD
Status : Deferred
Published: 2025-08-06T00:15:31.357
Modified: 2026-04-15T00:35:42.020
Link: CVE-2025-54872
Redhat
No data.
OpenCVE Enrichment
Updated: 2025-08-06T15:12:40Z