Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-27288 EUVD-2024-0784GHSA-26w3-q4j8-4xjpGO-2024-2613

1Panel open source panel project has an unauthorized vulnerability.

Published Mar 6, 2024 · Updated Aug 27, 2024 · Assigned by GitHub_M

Description

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.

Affected products

VendorProductAffectedFixed
1Panel-dev 1Panel < 1.10.1-lts —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/1Panel-dev/1Panel < 1.10.1-lts 1.10.1-lts GHSA-26w3-q4j8-4xjp

References