CVE-2024-53582

An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openpanel:openpanel:0.3.4:*:*:*:*:*:*:*

History

23 May 2025, 15:58

Type Values Removed Values Added
CPE cpe:2.3:a:openpanel:openpanel:0.3.4:*:*:*:*:*:*:*
References () https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes - () https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes - Broken Link
References () https://packetstorm.news/files/id/188913/ - () https://packetstorm.news/files/id/188913/ - Exploit
First Time Openpanel
Openpanel openpanel

24 Mar 2025, 17:15

Type Values Removed Values Added
CWE CWE-22
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

18 Feb 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : unknown
CWE CWE-22

03 Feb 2025, 17:15

Type Values Removed Values Added
CWE CWE-22
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
Summary
  • (es) Un problema encontrado en las funciones Copiar y Ver en el componente Administrador de archivos de OpenPanel v0.3.4 permite a los atacantes ejecutar un Directory Traversal a través de una solicitud HTTP manipulado.

31 Jan 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-31 16:15

Updated : 2025-05-23 15:58


NVD link : CVE-2024-53582

Mitre link : CVE-2024-53582

CVE.ORG link : CVE-2024-53582


JSON object : View

Products Affected

openpanel

  • openpanel
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')