GitHub Advisoryadvisory · Go

GHSA-pv7q-v9mv-9mh5 1Panel O&M management panel has a background arbitrary file reading vulnerability

HIGH Published 2023-08-10 Modified 2023-08-10 Official page ↗
Aliases
CVE-2023-39964
Ecosystem
Go
Packages
github.com/1Panel-dev/1Panel
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2023-08-10

Affected packages

• Go github.com/1Panel-dev/1Panel: >= 1.4.3, < 1.5.0 → fixed in 1.5.0

Description

Summary Arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. Details In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the file by obtaining the requested path parameter[path]. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability PoC Request /api/v1/files/loadfile, carry /etc/passwd data to read, as shown below: Impact 1Panel v1.4.3

Related

Alias · CVE (1)

  • CVE-2023-39964 1Panel is an open source Linux server operation and maintenance management panel. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References