Vendors / Openpanel Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Openpanel records in CISA KEV No Openpanel vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 56
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04309 · Published 2025-01-31 · No fix listed CWE-78
Priority MEDIUM 52
An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02397 · Published 2025-01-31 · No fix listed CWE-22
Priority MEDIUM 45
An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03311 · Published 2025-01-31 · No fix listed CWE-22
Priority MEDIUM 43
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00456 · Published 2025-03-14 · No fix listed CWE-281
Priority LOW 33
An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function
CVSS 3.1 MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.00274 · Published 2025-03-14 · No fix listed CWE-269
Open these records in search → All records by CVSS severity
2 2 2 0 0
THREATIST.IORead the docs