CVE-2023-39965

    Dashboard / Vulnerabilities / CVE-2023-39965

    CVE-2023-39965

    Published: 10 Aug 2023Last Modified: 12 Aug 2026

    Summary: 1Panel Unauthorized access in Backend

    Details: 1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.

    References: https://github.com/1Panel-dev/1Panel/releases/tag/v1.5.0, https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-85cf-gj29-f555, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39965.json, https://nvd.nist.gov/vuln/detail/CVE-2023-39965

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 86ba53d6ec35fe2f0f3bcdb8c8d3c4cb2ef4cf1b
    Fixed -39d8b0d98c563308df966a676a5f8aec976d10d1

    Affected versions

    1.4.3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-39965 | CVE-DB