Skip to content
OpenAdvisories

Vendor

LXware

3 known vulnerabilities.

Products

1Panel 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2025-34429

    1Panel CSRF Web Port Configuration Change

    1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a…

    LXware 1Panel github.com/1Panel-dev/1Panel Go
  • High 7.0
    CVE-2025-34410

    1Panel CSRF in Change Username Functionality Allows Account Lockout

    1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or O…

    LXware 1Panel github.com/1Panel-dev/1Panel Go