CVE-2025-34429
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
CSRF vulnerability in 1Panel versions 1.10.33 to 2.0.15 in the web port configuration functionality. The port-change endpoint lacks CSRF defenses (tokens, Origin/Referer validation), allowing an attacker to change the listening port, causing loss of access on the original port and potentially exposing the service on an attacker-chosen port.
Risk Assessment
The risk is a CSRF attack that can cause denial of service (DoS) by changing the panel's listening port, and may unintentionally expose the panel on an attacker-chosen port, facilitating further attacks.
Recommendation
Immediately update 1Panel to version 2.0.16 or later, which includes CSRF fixes. If updating is not possible, implement additional defenses such as Origin/Referer header validation or anti-CSRF tokens.
Other vulnerabilities in 1Panel
See all- CVE-2025-34430Medium
CSRF vulnerability in 1Panel versions 1.10.33 through 2.0.15 in the panel name management functionality. Lack of CSRF defenses (tokens, Origin/Referer validation) allows an attacker to change the victim's panel name without consent via a crafted webpage.
- CVE-2025-34410High
1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality. The endpoint lacks CSRF protections like anti-CSRF tokens or Origin/Referer validation, allowing an attacker to change the victim's username without consent.
- CVE-2023-39966High
In version 1.4.3 of the 1Panel, there is an arbitrary file write vulnerability that could lead to direct control of the server. The issue arises from a lack of parameter filtering in the `SaveContent` function in the `api/v1/file.go` file.
- CVE-2023-39965Medium
In version 1.4.3 of the 1Panel, authenticated attackers can download arbitrary files through the API interface, leading to unauthorized access. This may result in significant information leakage.
- CVE-2023-39964High
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, there is a vulnerability that allows an attacker to read arbitrary important configuration files on the server due to unfiltered request parameters.
- CVE-2023-36458Medium
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker could craft malicious payloads to achieve command injection when entering the container terminal.
- CVE-2023-36457Medium
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories.
Original NVD description (English source)
1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a port-change request; when a victim visits it while authenticated, the browser includes valid session cookies and the request succeeds. This allows an attacker to change the port on which the 1Panel web service listens, causing loss of access on the original port and resulting in service disruption or denial of service, and may unintentionally expose the service on an attacker-chosen port.