CVE-2025-34429

🗓️ 10 Dec 2025 18:23:30Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 10 Views

CSRF flaw in 1Panel port change (v1.10.33–2.0.15) can alter listening port, risking service disruption.

Reporter	Title	Published	Views	Family All 22
CNNVD	1Panel 跨站请求伪造漏洞	10 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-34429 1Panel CSRF Web Port Configuration Change	10 Dec 202518:23	–	cvelist
EUVD	EUVD-2025-202535	10 Dec 202521:31	–	euvd
Github Security Blog	1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality	10 Dec 202521:31	–	github
GitLab Advisory Database	1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality	10 Dec 202500:00	–	gitlab
NVD	CVE-2025-34429	10 Dec 202519:16	–	nvd
OSV	GHSA-WRVC-X3WF-J5F5 1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality	10 Dec 202521:31	–	osv
OSV	GO-2025-4231 1Panel contains a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality in github.com/1Panel-dev/1Panel	15 Dec 202520:15	–	osv
OSV	SUSE-SU-2026:0037-1 Security update for govulncheck-vulndb	6 Jan 202610:24	–	osv
Positive Technologies	PT-2025-47494	19 Nov 202500:00	–	ptsecurity

NVD

Vulners

CNA

Node

fit2cloud 1panelRange1.10.33-lts–2.0.15

[
  {
    "defaultStatus": "unknown",
    "product": "1Panel",
    "repo": "https://github.com/1Panel-dev/1Panel",
    "vendor": "LXware",
    "versions": [
      {
        "lessThanOrEqual": "2.0.15",
        "status": "affected",
        "version": "1.10.33",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/1panel-csrf-web-port-configuration-change
1panel	www.1panel.pro/
github	www.github.com/1Panel-dev/1Panel/releases

05 Mar 2026 12:04Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.1

CVSS 47

EPSS0.00041

SSVC

CWE-352