VDB
Sign up
—

GO-2024-2613

Unauthorized Console access in github.com/1Panel-dev/1Panel

Quick fix

GO-2024-2613 — github.com/1Panel-dev/1Panel: upgrade to the fixed version with the command below.

go get github.com/1Panel-dev/1Panel@v1.10.1-lts

Details

If the user attempts to access a secure entry point and intercepts with Burp, they can get access to the console page. This access does not return data nor allow modification operations.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/1Panel-dev/1Panel
Introduced in: 0Fixed in: 1.10.1-lts
Fixgo get github.com/1Panel-dev/1Panel@v1.10.1-lts

References