5.5Medium
CVE-2025-25873
Description
Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function
Weakness (CWE):
CWE-352
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
References and patches
- https://openpanel.com/docs/ Product
- https://packetstorm.news/files/id/189597 Exploit
CPE matches (NVD) (1)
cpe:2.3:a:openpanel:openadmin:0.3.4:*:*:*:*:*:*:*