CVEvulnerability

CVE-2023-39965

4.3 MEDIUM Published 2023-08-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-863

Description

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.

Affected configurations

• fit2cloud 1panel 1.4.3

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References