1Panel Cross-Site Request Forgery Vulnerability in Change Username Functionality

A cross-site request forgery (CSRF) vulnerability has been identified in 1Panel versions 1.10.33 prior to 2.0.15. The issue resides in the Change Username feature within the settings panel. The vulnerable endpoint lacks proper CSRF protections, such as anti-CSRF tokens or validation of the Origin/Referer headers. This allows an attacker to create a malicious webpage that, when visited by an authenticated user, can successfully change the user's 1Panel username without consent. Following the unauthorized username change, the user is logged out and locked out of their account, as they cannot log in with the previous username, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability allows for unauthorized username changes, causing account lockout and denial-of-service for the affected user.