FeatherPanel versions before 1.3.7.10 fail to validate permissions in the SubuserController updateSubuser handler, allowing authenticated subusers to modify their own permission records. A subuser with minimal permissions can send a crafted request to grant themselves full server control, enabling unauthorized access to sensitive data, backups, and server configuration.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
mythicalltd:featherpanel
References 6
https://github.com/MythicalLTD/FeatherPanel/commit/06ef8dcac471201748516ca74369…
Patch Commit
https://github.com/MythicalLTD/FeatherPanel/releases/tag/v1.3.7.10
FeatherPanel v1.3.7.10 Release Notes
https://github.com/MythicalLTD/FeatherPanel/blob/376b003aa9685b74153d239d2b3f64…
NVD
https://github.com/MythicalLTD/FeatherPanel/blob/376b003aa9685b74153d239d2b3f64…
NVD
https://github.com/MythicalLTD/FeatherPanel
NVD
https://www.vulncheck.com/advisories/featherpanel-before-1.3.7.10-privilege-esc…
VulnCheck Advisory: FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission Update