| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/1Panel-dev/1Panel | ≥ 1.4.3, < 1.5.0 | 1.5.0 |
| 1panel | = 1.4.3 |
Any file downloading vulnerability exists in 1Panel backend.
Authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access.
payload:
POST /api/v1/files/download/bypath HTTP/1.1 Host: ip Content-Type: application/json
{"path":"/etc/passwd"}
Attackers can freely download the file content on the target system. This will be caused a large amount of information leakage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free