CVE-2023-36458

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-36458
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36458.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-36458
Aliases
Published
2023-07-05T20:57:19.130Z
Modified
2026-07-15T01:48:51.834388677Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
1Panel vulnerable to ommand injection when entering the container terminal
Details

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.

Database specific 
{
    "cwe_ids": [
        "CWE-77"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36458.json"
}
References

Affected packages

Git / github.com/1panel-dev/1panel

Affected ranges

Type
GIT
Repo
https://github.com/1panel-dev/1panel
Events
Introduced
c2879f2a56fbc597d00901c34dd603a6b2c34d3c
Fixed
c2879f2a56fbc597d00901c34dd603a6b2c34d3c
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:fit2cloud:1panel:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": ", 1.3.6"
        },
        {
            "last_affected": ", 1.3.6"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "1.3.6"
        }
    ]
}

Affected versions

, 1.*
, 1.3.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36458.json"