BaseFortify

Publication date: 2025-11-04

Last updated on: 2025-11-10

Assigner: GitHub, Inc.

Description

LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function in the FetchController class accepts user-provided URLs and makes HTTP requests to them without validating that the destination is not an internal or private network resource. This Server-Side Request Forgery (SSRF) vulnerability allows authenticated attackers to use the application server to perform port scanning and service discovery on internal networks. Practical impact is very limited because the function only extracts content from HTML meta keywords tags, which prevents meaningful data exfiltration from databases, APIs, or cloud metadata endpoints. This issue is fixed in version 2.4.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-04

Last Modified

2025-11-10

Generated

2026-07-06

AI Q&A

2025-11-04

EPSS Evaluated

2026-07-05

NVD

CVE-2025-62719

Affected Vendors & Products

Vendor	Product	Version / Range
linkace	linkace	to 2.4.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) in LinkAce versions 2.3.0 and below. The htmlKeywordsFromUrl function in the FetchController class accepts user-provided URLs and makes HTTP requests without validating if the destination is an internal or private network resource. This allows authenticated attackers to use the application server to perform port scanning and service discovery on internal networks. However, the practical impact is limited because the function only extracts content from HTML meta keywords tags, preventing meaningful data exfiltration.

Impact Analysis

The vulnerability allows authenticated attackers to perform port scanning and service discovery on internal networks via the application server. This could potentially expose information about internal network services. However, the impact is very limited since the function only extracts HTML meta keywords, preventing significant data exfiltration from databases, APIs, or cloud metadata endpoints.

Mitigation Strategies

Upgrade LinkAce to version 2.4.0 or later, as this version contains the fix for the SSRF vulnerability in the htmlKeywordsFromUrl function.

Hi! I’m here to help you understand CVE-2025-62719. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70