Go/github.com/1Panel-dev/1Panel CVE-2025-34429: high 7.1, EPSS 0.18%
1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.10.33 | - | 2.0.15 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wrvc-x3wf-j5f5
- https://nvd.nist.gov/vuln/detail/CVE-2025-34429
- https://1panel.pro
- https://github.com/1Panel-dev/1Panel
- https://github.com/1Panel-dev/1Panel/releases
- https://www.vulncheck.com/advisories/1panel-csrf-web-port-configuration-change
CVE-2025-34429 · published · modified · JSON