5.5Medium

CVE-2025-25873

openpanel openadmin Published: (1 year ago)

Description

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges via the Change Root Password function

Weakness (CWE): CWE-352

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
openpanel openadmin 0.3.4

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:openpanel:openadmin:0.3.4:*:*:*:*:*:*:*