CVE-2024-34352 Arbitrary file write vulnerability in 1Panel

2024-05-0914:38:19

CWE-77

GitHub_M

github.com

cve-2024-34352

linux server

command injections

arbitrary file writes

rces

mirror configuration

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol > can be used to achieve arbitrary file writing. This vulnerability is fixed in v1.10.3-lts.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*"
    ],
    "vendor": "fit2cloud",
    "product": "1panel",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.10.3-lts",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]