CVE-2023-36457

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-36457
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36457.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-36457
Aliases
Published
2023-07-05T20:57:23Z
Modified
2025-10-22T18:38:23.507194Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
1Panel vulnerable to command injection when adding container repositories
Details

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories. The vulnerability has been fixed in v1.3.6.

Database specific
{
    "cwe_ids": [
        "CWE-77"
    ]
}
References

Affected packages

Git / github.com/1panel-dev/1panel

Affected ranges

Type
GIT
Repo
https://github.com/1panel-dev/1panel
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v1.*

v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.3.5