An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request.
References
Link | Resource |
---|---|
https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes | Broken Link |
https://packetstorm.news/files/id/188913/ | Exploit |
Configurations
History
23 May 2025, 15:58
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:openpanel:openpanel:0.3.4:*:*:*:*:*:*:* | |
References | () https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes - Broken Link | |
References | () https://packetstorm.news/files/id/188913/ - Exploit | |
First Time |
Openpanel
Openpanel openpanel |
24 Mar 2025, 17:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-22 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
18 Feb 2025, 19:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
CWE |
03 Feb 2025, 17:15
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-22 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
Summary |
|
31 Jan 2025, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-01-31 16:15
Updated : 2025-05-23 15:58
NVD link : CVE-2024-53582
Mitre link : CVE-2024-53582
CVE.ORG link : CVE-2024-53582
JSON object : View
Products Affected
openpanel
- openpanel
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')