Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-36457

1Panel vulnerable to command injection when adding container repositories

Description

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories. The vulnerability has been fixed in v1.3.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

1Panel-dev 1Panel

  • < 1.3.6affected

References