CVE-2025-25873

Medium CVSS: 5.5

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function

Vendor

Openpanel

Product

Openadmin

CWE

CWE-352

Yayın Tarihi

2025-03-14 16:15:40

Güncelleme

2025-04-03 15:33:34

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-352 Openadmin MEDIUM Openpanel 2025

Referanslar

https://openpanel.com/docs/ https://packetstorm.news/files/id/189597

Benzer Kayıtlar

High

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

Medium

CVE-2025-25872

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

Critical

CVE-2024-53584

OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.

High

CVE-2024-53582

An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to exec…

Critical

CVE-2024-53537

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager…