Fit2Cloud vulnerabilities, page 2
78 vulnerabilities
Known vulnerabilities in Fit2Cloud products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 13 products.
PrioritiseCVE-2025-62795jumpserver +1 moreJumpServer Unauthorized LDAP Configuration Access via WebSocketJumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket endpoint, bypassing authorization checks and potentially exposing LDAP credentials or causing unintended sync operations. This vulnerability is fixed in v3.10.21-lts and v4.10.12-lts.CVSS7.1HighEPSS0.29%PrioritiseCVE-2025-62712jumpserver +1 moreJumpServer Connection Token Leak VulnerabilityJumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint (/api/v1/authentication/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all users instead of restricting results to tokens owned by or authorized for the requester. An attacker who obtains these tokens can use them to initiate connections to managed assets on behalf of the original token owners, resulting in unauthorized access and privilege escalation across sensitive systems. This vulnerability is fixed in v3.10.20-lts and v4.10.11-lts.CVSS9.6CriticalEPSS0.50%RoutineCVE-2025-56413fit2cloud · 1panelfit2cloud 1panelOS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate endpoint.CVSS8.8HighEPSS1.20%PrioritiseCVE-2025-544241panel-dev · 1panel +2 more1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.CVSS9.8CriticalEPSS1.09%RoutineCVE-2025-27095jumpserver +1 moreJumpServer has a Kubernetes Token Leak VulnerabilityJumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server controlled by the attacker. This allows the attacker to intercept and capture the Kubernetes cluster token. This can potentially allow unauthorized access to the cluster and compromise its security. This vulnerability is fixed in 4.8.0 and 3.10.18.CVSS4.3MediumEPSS0.33%PrioritiseCVE-2024-40628jumpserver +1 moreArbitrary File Read in Ansible Playbooks in JumpserverJumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the ansible playbook to read arbitrary files in the celery container, leading to sensitive information disclosure. The Celery container runs as root and has database access, allowing the attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been addressed in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There is no known workarounds for this vulnerability.CVSS10.0CriticalEPSS0.86%PrioritiseCVE-2024-40629jumpserver +1 moreArbitrary File Write in Ansible Playbooks leads to RCE in JumpserverJumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the Ansible playbook to write arbitrary files, leading to remote code execution (RCE) in the Celery container. The Celery container runs as root and has database access, allowing an attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been patched in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There are no known workarounds for this vulnerability.CVSS10.0CriticalEPSS1.27%PrioritiseCVE-2024-399111panel-dev · 1panel +2 more1Panel SQL injection1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability.CVSS10.0CriticalEPSS4.53%PrioritiseCVE-2024-399071panel-dev · 1panel +2 morea sqlinjection in 1Panel1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.CVSS9.8CriticalEPSS29.18%RoutineCVE-2024-343521panel-dev · 1panel +2 moreArbitrary file write vulnerability in 1Panel1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol `>` can be used to achieve arbitrary file writing. This vulnerability is fixed in v1.10.3-lts.CVSS7.5HighEPSS1.33%RoutineCVE-2024-302571panel-dev · 1panel +2 more1Panel's password verification is suspected to have a timing attack vulnerability1Panel is an open source Linux server operation and maintenance management panel. The password verification in the source code uses the != symbol instead hmac.Equal. This may lead to a timing attack vulnerability. This vulnerability is fixed in 1.10.3-lts.CVSS5.9MediumEPSS0.38%PrioritiseCVE-2024-29202jumpserver +1 moreJumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in CeleryJumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can exploit a Jinja2 template injection vulnerability in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has database access, attackers could steal sensitive information from all hosts or manipulate the database. This vulnerability is fixed in v3.10.7.CVSS10.0CriticalEPSS5.94%PrioritiseCVE-2024-29201jumpserver +1 moreJumpServer's insecure Ansible playbook validation leads to RCE in CeleryJumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has database access, attackers could steal sensitive information from all hosts or manipulate the database. This vulnerability is fixed in v3.10.7.CVSS10.0CriticalEPSS5.99%RoutineCVE-2024-29020jumpserver +1 moreJumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leakedJumpServer is an open source bastion host and an operation and maintenance security audit system. An authorized attacker can obtain sensitive information contained within playbook files if they manage to learn the playbook_id of another user. This breach of confidentiality can lead to information disclosure and exposing sensitive data. This vulnerability is fixed in v3.10.6.CVSS5.3MediumEPSS0.29%RoutineCVE-2024-29024jumpserver +1 moreJumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer FunctionalityJumpServer is an open source bastion host and an operation and maintenance security audit system.
An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromising the integrity and security of the system. This vulnerability is fixed in v3.10.6.CVSS5.3MediumEPSS0.24%RoutineCVE-2024-2352fit2cloud · 1panel +1 more1Panel swap baseApi.UpdateDeviceSwap command injectionA vulnerability, which was classified as critical, has been found in 1Panel up to 1.10.1-lts. Affected by this issue is the function baseApi.UpdateDeviceSwap of the file /api/v1/toolbox/device/update/swap. The manipulation of the argument Path with the input 123123123\nopen -a Calculator leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-256304.CVSS9.8CriticalEPSS3.04%RoutineCVE-2024-272881panel-dev · 1panel +2 more1Panel open source panel project has an unauthorized vulnerability.1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.CVSS6.3MediumEPSS0.47%RoutineCVE-2024-24763jumpserver +1 moreJumpServer Open Redirect VulnerabilityJumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to version 3.10.0, attackers can exploit this vulnerability to construct malicious links, leading users to click on them, thereby facilitating phishing attacks or cross-site scripting attacks. Version 3.10.0 contains a patch for this issue. No known workarounds are available.CVSS6.1MediumEPSS1.06%RoutineCVE-2024-247681panel-dev · 1panel +2 more1Panel set-cookie is missing the Secure keyword1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.CVSS7.5HighEPSS0.30%PrioritiseCVE-2023-50612fit2cloud · cloudexplorer_litefit2cloud cloudexplorer_liteInsecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter.CVSS7.8HighEPSS0.26%