GO-2024-2613

vendorUSosv

Unauthorized Console access in github.com/1Panel-dev/1Panel

view advisory published 2024-03-14Licence: per source

If the user attempts to access a secure entry point and intercepts with Burp, they can get access to the console page. This access does not return data nor allow modification operations.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-27288USlow3.1OT elevated—
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page.…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan