PT-2025-20668 · Unknown · 1Panel-Dev Maxkb

Yaowenxiao · Published 2025-05-11 · Updated 2025-05-11 · CVE-2025-4546

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1Panel-dev MaxKB versions up to 1.10.7

Description A critical issue was found in the Knowledge Base Module component, leading to csv injection. This issue can be exploited remotely. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions up to 1.10.7, upgrade to version 1.10.8 to address this issue. As a temporary workaround, consider restricting access to the Knowledge Base Module until the upgrade is applied.

Exploit

Fix

Special Elements Injection

RCE

Weakness Enumeration

CWE-74

CWE-1236

Related Identifiers

CVE-2025-4546

Affected Products

1Panel-Dev Maxkb

References · 11

• 🔥 https://github.com/yaowenxiao721/Poc/blob/main/MaxKB/MaxKB-poc1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4546 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4546 · Vendor Advisory
• https://t.me/cvedetector/25053 · Telegram Post
• https://t.me/cvenotify/121682 · Telegram Post
• https://vuldb.com/?ctiid.308293 · Note
• https://vuldb.com/?id.308293 · Note
• https://vuldb.com/?submit.566517 · Note
• https://t.me/cvetracker/23587 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1921663265228169267 · Twitter Post
• https://twitter.com/CVEnew/status/1921660501093715982 · Twitter Post