CVE-2023-39966
HIGH1Panel 1.4.3-<1.5.0 - Unauthenticated Arbitrary File Write via SaveContent Function
Title source: llmDescription
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the `api/v1/file.go` file, there is a function called `SaveContentthat,It `recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering allows for arbitrary file write operations. Version 1.5.0 contains a patch for this issue.
References (2)
Core 2
Core References
Exploit, Vendor Advisory x_refsource_confirm
https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-hf7j-xj3w-87g4
Product, Release Notes x_refsource_misc
https://github.com/1Panel-dev/1Panel/releases/tag/v1.5.0
Scores
CVSS v3
7.5
EPSS
0.0070
EPSS Percentile
48.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-862
Status
published
Products (2)
1Panel-dev/1Panel
1.4.3 - 1.5.0Go
fit2cloud/1panel
1.4.3
Published
Aug 10, 2023
Tracked Since
Feb 18, 2026