CVE-2023-36458mediumCWE-77

CVE-2023-36458: falha de média gravidade em 1Panel-dev 1Panel

1Panel vulnerable to ommand injection when entering the container terminal

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar 1Panel+ Monitorar github.com/1Panel-dev/1Panel

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 2.3%
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
1Panel-dev · 1Panel
CVEs relacionadas — 1Panel-dev 1Panel

No mesmo produto, das mais perigosas para as menos.

CVE-2024-39907CRITICALa sqlinjection in 1Panel EPSS 29.2%CVE-2023-37477HIGHCommand injection in firewall ip functionality in 1PanelEPSS 5.8%CVE-2024-39911CRITICAL1Panel SQL injectionEPSS 4.5%CVE-2023-36457MEDIUM1Panel vulnerable to command injection when adding container repositoriesEPSS 2.3%CVE-2024-34352MEDIUMArbitrary file write vulnerability in 1Panel EPSS 1.3%CVE-2025-54424HIGH1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command ExecutionEPSS 1.0%