（CVE-2025-4546）1Panel MaxKB知识库模块CSV注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2025-4546
• https://www.knowsafe.com/ti/info/0/996238
• https://maxkb.cn/docs/v1/changelog/
• https://nvd.nist.gov/vuln/detail/cve-2025-4546
• https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-rr4r-7cj2-29vp
• https://access.redhat.com/security/cve/cve-2025-4546
• https://www.cve.org/CVERecord?id=CVE-2025-4546
• https://vuldb.com/?id.308293
• https://github.com/advisories/GHSA-7f8g-5r7m-gwx4
• https://avd.aquasec.com/nvd/2025/cve-2025-4546

Related Vulnerabilities

• 飞致云 1Panel 未授权 设计缺陷漏洞
• 飞致云 1Panel 身份验证缺陷漏洞
• 飞致云 1Panel 需授权 命令注入漏洞
• PoC1Panel 远程命令执行漏洞
• PoCCVE-2024-39907: 1Panel SQL Injection - Authenticated
• PoC1panel-loadfile-fileread: 1Panel loadfile 后台文件读取漏洞
• MaxKB 存在弱口令漏洞
• 1Panel CVE-2024-39911 SQL注入漏洞
• 1Panel 前台面板SQL注入导致RCE漏洞
• 1Panel loadfile 任意文件读取漏洞
• 1Panel CVE-2024-2352 命令注入漏洞