High · published December 11, 2025
⚡ A sneaky CSRF vulnerability lurks in 1Panel versions 1.10.33 - 2.0.15, allowing attackers to hijack port configurations—imagine someone changing the locks on your doors while you're away! 🔑 Think of the port-change functionality as a door to your service. If a crafty individual manipulates which door to use, they could lock you out or even let themselves in—just by tricking you into opening it from the inside! This means an attacker could disrupt your service by changing the port number, potentially locking you out of your own system or exposing it on a port they choose. It could lead to a denial of service or worse—allow unauthorized access to your sensitive data!
Think of the port-change functionality as a door to your service. If a crafty individual manipulates which door to use, they could lock you out or even let themselves in—just by tricking you into opening it from the inside! The CSRF vulnerability stems from the absence of anti-CSRF tokens or proper Origin/Referer validation in the port-change endpoint. An attacker can craft a malicious webpage that, when visited by an authenticated user, submits a request to change the listening port.
This means an attacker could disrupt your service by changing the port number, potentially locking you out of your own system or exposing it on a port they choose. It could lead to a denial of service or worse—allow unauthorized access to your sensitive data! To protect against this vulnerability, immediately upgrade to versions beyond 2.0.15. Implement CSRF protections such as anti-CSRF tokens and validate the Origin/Referer headers for sensitive endpoints. Regularly audit your configurations to ensure security measures are in place! You've got this! Follow these steps to secure your service and regain control over your ports! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| fit2cloud/1panel | ≥ 1.10.33-lts, ≤ 2.0.15 | — |