CVE-2024-27288

Summary

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.

Affected Software

Weaknesses

• CWE-863: CWE-863: Incorrect Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-26w3-q4j8-4xjp
• https://github.com/1Panel-dev/1Panel/releases/tag/v1.10.1-lts

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-26w3-q4j8-4xjp
• https://github.com/1Panel-dev/1Panel/releases/tag/v1.10.1-lts

• ←Previous
• Next→