CVE-2023-36457

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-36457

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36457.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-36457

Aliases

Published

2023-07-05T20:57:23.640Z

Modified

2026-07-15T01:49:02.960314424Z

Severity

6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

1Panel vulnerable to command injection when adding container repositories

Details

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories. The vulnerability has been fixed in v1.3.6.

Database specific

{
    "cwe_ids": [
        "CWE-77"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36457.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/1panel-dev/1panel

Affected ranges

Type

GIT

Repo

https://github.com/1panel-dev/1panel

Events

Introduced

Fixed

c2879f2a56fbc597d00901c34dd603a6b2c34d3c

Database specific

{
    "cpe": "cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.3.6"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v1.*

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.2.0

v1.2.1

v1.2.2

v1.2.3

v1.3.0

v1.3.1

v1.3.2

v1.3.3

v1.3.4

v1.3.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36457.json"