| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/1Panel-dev/1Panel | ≥ 1.4.3, < 1.5.0 | 1.5.0 |
| 1panel | = 1.4.3 |
An arbitrary file write vulnerability could lead to direct control of the server
In the api/v1/file.go file, there is a function called SaveContentthat,It recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering allows for arbitrary file write operations.It looks like this:
The server was successfully written to the public key
Successfully connected to the target server using an SSH private key.
As a result, the server is directly controlled, causing serious harm
1Panel v1.4.3
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free