GHSA-pv7q-v9mv-9mh5

    Dashboard / Vulnerabilities / GHSA-pv7q-v9mv-9mh5

    GHSA-pv7q-v9mv-9mh5

    Published: 10 Aug 2023Last Modified: 10 Sept 2026

    Summary: 1Panel O&M management panel has a background arbitrary file reading vulnerability

    Details: ### Summary Arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. ### Details In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the file by obtaining the requested path parameter[path]. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability ![picture1](https://user-images.githubusercontent.com/136411443/257109786-1b0af1e7-346f-4e92-9da2-d977f2f7fe6a.jpg) ### PoC Request /api/v1/files/loadfile, carry /etc/passwd data to read, as shown below: ![微信图片_20230731112833](https://user-images.githubusercontent.com/136411443/257109931-108fc16f-e180-4d1e-996c-d9da5f76559f.png) ### Impact 1Panel v1.4.3

    References: https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-pv7q-v9mv-9mh5, https://nvd.nist.gov/vuln/detail/CVE-2023-39964, https://github.com/1Panel-dev/1Panel, https://github.com/1Panel-dev/1Panel/releases/tag/v1.5.0

    Affected packages

    Package

    Name: github.com/1Panel-dev/1Panel

    Purl: pkg:golang/github.com/1Panel-dev/1Panel

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 1.4.3
    Fixed -1.5.0

    Affected versions

    1.4.3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-pv7q-v9mv-9mh5 | CVE-DB