Executive Summary

This vulnerability is a cross-site request forgery (CSRF) issue in 1Panel versions 1.10.33 through 2.0.15 affecting the panel name management functionality. The affected endpoint lacks CSRF protections like anti-CSRF tokens or Origin/Referer validation. An attacker can create a malicious webpage that, when visited by an authenticated user, submits a request to change the panel name without the user's consent, using the user's valid session cookies.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows a remote attacker to change the victim's panel name to any arbitrary value without their consent. This unauthorized change can lead to confusion, misrepresentation, or potential misuse of the panel's identity, possibly affecting the integrity and trustworthiness of the system.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this CSRF vulnerability, immediately update 1Panel to a version later than 2.0.15 where the issue is fixed. If an update is not possible, implement CSRF protections such as anti-CSRF tokens or Origin/Referer header validation on the panel name management endpoint to prevent unauthorized requests. Additionally, educate users to avoid visiting untrusted webpages while authenticated to the panel.

Useful 0 Not Useful 0