GCVE - cpe:2.3:a:openpanel:openpanel:0.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openpanel:openpanel:0.3.4:*:*:*:*:*:*:*

part: a version: 0.3.4 update: *

Vendor	Openpanel (`d6fec2e6-d75a-52b1-b038-71f9669db872`)
Product	Openpanel (`e7b38af4-ed0b-5ae8-8fa0-daa673a3b5d4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openpanel-dev/openpanel`	purl2cpe	2026-06-01 10:15:26.272824

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-25872`	vulnerable	2026-06-08 07:12:51.366894	Details available An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function Published: 2025-03-14T00:00:00.000Z Updated: 2025-03-19T18:39:05.247Z Open on db.gcve.eu Reference links https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes https://packetstorm.news/files/id/189583	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-25871`	vulnerable	2026-06-08 07:12:51.366334	Details available An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function Published: 2025-03-14T00:00:00.000Z Updated: 2025-03-19T18:38:07.552Z Open on db.gcve.eu Reference links https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes https://packetstorm.news/files/id/189621	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-53584`	vulnerable	2026-06-08 06:54:15.106943	Details available OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter. Published: 2025-01-31T00:00:00.000Z Updated: 2025-03-18T18:43:24.465Z Open on db.gcve.eu Reference links https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes https://packetstorm.news/files/id/188915/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-53582`	vulnerable	2026-06-08 06:54:15.106454	Details available An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request. Published: 2025-01-31T00:00:00.000Z Updated: 2025-03-24T16:27:40.139Z Open on db.gcve.eu Reference links https://packetstorm.news/files/id/188913/ https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.