CVE-2023-36458

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-36458

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36458.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-36458

Aliases

Published

2023-07-05T20:57:19.130Z

Modified

2025-12-04T23:56:42.248597Z

Severity

6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

1Panel vulnerable to ommand injection when entering the container terminal

Details

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.

Database specific

{
    "cwe_ids": [
        "CWE-77"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36458.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/1panel-dev/1panel

Affected ranges

Type: GIT
Repo: https://github.com/1panel-dev/1panel
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

c2879f2a56fbc597d00901c34dd603a6b2c34d3c

Affected versions

v1.*

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.2.0

v1.2.1

v1.2.2

v1.2.3

v1.3.0

v1.3.1

v1.3.2

v1.3.3

v1.3.4

v1.3.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36458.json"