CVE-2023-39966

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

CVE-2023-39966 1Panel arbitrary file write vulnerability exists in the background

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the...

CVE-2023-39966

1Panel CVE-2023-39966 affects v1.4.3; the api/v1/file.go SaveContentthat function accepts user POST JSON without proper parameter filtering, enabling arbitrary file writes and potential full server control. 1.5.0 patches this issue. Related advisories cite an arbitrary file write vulnerability wi...

CVE-2023-39966

creationtimestamp| type| source ---|---|--- 2023-08-10 06:49:21+00:00| published-proof-of-concept| https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-hf7j-xj3w-87g4...