Description
1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1Panel-dev | 1Panel | < 1.10.3-lts | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/1Panel-dev/1Panel | < 1.10.3 | 1.10.3 | GHSA-6m9h-2pr2-9j8f |
| Go | github.com/1Panel-dev/1Panel | all versions | — | GO-2024-2734 |