MEDIUM🇬🇧 English

CVE-2024-24768

CVSS 6.5v3.1pub. 2024-02-05upd. 2024-11-21

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

  • Fit2cloud 1panel

    APP
    Fit2Cloud
    1.9.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-39907CRITICAL9.8PL ✓ten sam produkt

SQL Injection w Fit2Cloud 1Panel umożliwiający RCE poprzez zapis plików

CVE-2024-39911CRITICAL10.0PL ✓ten sam produkt

SQL Injection przez nagłówek User-Agent w Fit2Cloud 1Panel

CVE-2025-34429HIGH7.0ten sam produkt

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port con...

CVE-2025-34410HIGH7.0ten sam produkt

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Usern...

CVE-2025-66507HIGH7.5ten sam produkt

1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.13 and below allow...