CVE-2024-24768

    Dashboard / Vulnerabilities / CVE-2024-24768

    CVE-2024-24768

    Published: 5 Feb 2024Last Modified: 28 Oct 2026

    Summary: 1Panel set-cookie is missing the Secure keyword

    Details: 1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.

    References: https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-9xfw-jjq2-7v8h, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24768.json, https://nvd.nist.gov/vuln/detail/CVE-2024-24768, https://github.com/1Panel-dev/1Panel/commit/1169648162c4b9b48e0b4aa508f9dea4d6bc50d5, https://github.com/1Panel-dev/1Panel/pull/3817

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- fdf9046430fa5557c8422f11621cf1f7e4d90334
    Fixed -1169648162c4b9b48e0b4aa508f9dea4d6bc50d5

    Affected versions

    1.9.5

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High