Executive Summary

This vulnerability is a cross-site request forgery (CSRF) issue in 1Panel versions 1.10.33 to 2.0.15 affecting the Change Username functionality. The endpoint lacks CSRF protections like anti-CSRF tokens or Origin/Referer validation. An attacker can create a malicious webpage that, when visited by an authenticated user, submits a request to change the user's username without their consent. This causes the victim to be logged out and locked out of their account because they cannot log in with the previous username.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to an attacker changing your 1Panel username without your consent, resulting in you being logged out and unable to log back in with your previous username. This effectively locks you out of your account, causing a denial of service.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediately update 1Panel to a version later than 2.0.15 where the CSRF vulnerability is fixed. If an update is not possible, implement additional CSRF protections such as anti-CSRF tokens or Origin/Referer header validation on the Change Username endpoint. Additionally, monitor for suspicious username change requests and consider restricting access to the settings panel to trusted users only.

Useful 0 Not Useful 0