-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGo| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/1Panel-dev/1Panel | go | <= 1.10.0-lts | 1.10.1-lts |
Miggo AIRoot Cause AnalysisThe vulnerability stems from incorrect authorization (CWE-863) in route handling. The fix in PR #4014 addressed a login page redirect issue, which correlates with authentication flow control. The release notes specifically mention this PR fixed the unauthorized access vulnerability. In Go web applications, route initialization (typically in router.go) is where authentication middleware would be applied. The vulnerability likely existed because critical console routes were not properly protected by authentication checks in the router configuration prior to the patch.
Ongoing coverage of React2Shell