Executive Summary

This vulnerability is a cross-site request forgery (CSRF) in 1Panel versions 1.10.33 to 2.0.15 affecting the web port configuration functionality. The port-change endpoint does not have protections like anti-CSRF tokens or Origin/Referer validation. An attacker can create a malicious webpage that, when visited by an authenticated user, sends a port-change request using the user's valid session cookies. This allows the attacker to change the port on which the 1Panel web service listens without the user's consent.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can cause service disruption or denial of service by changing the port on which the 1Panel web service listens, resulting in loss of access on the original port. Additionally, it may unintentionally expose the service on an attacker-chosen port, potentially increasing security risks.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediately restrict access to the 1Panel web service to trusted users only, avoid visiting untrusted webpages while authenticated to the 1Panel service, and monitor for unexpected changes in the web service port. Additionally, update 1Panel to a version later than 2.0.15 once available that includes CSRF protections such as anti-CSRF tokens or Origin/Referer validation.

Useful 0 Not Useful 0