CVE-2024-30257

Published April 18th, 2024

View on NVD ↗

CVSS v3

3.9

LOW

CVSS v2

N/A

Affected

PROJECT

Description

1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts.

1Panel-dev/1Panel

🔥 1Panel is a modern, open-source VPS control panel — and the only one with native AI agent support. Run Ollama models, deploy OpenClaw agents, and manage your entire server stack from one clean web interface.

GitHub

36K