CVE-2024-27288

Description

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.

References

https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-26w3-q4j8-4xjp

https://github.com/1Panel-dev/1Panel/releases/tag/v1.10.1-lts

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3