CVE-2023-36458: 1Panel vulnerable to ommand injection when entering the container terminal
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
1Panelto a version that resolves this vulnerability.Fixed in 1.3.6
Event History
Frequently Asked Questions
What is CVE-2023-36458?
CVE-2023-36458 is a command injection vulnerability in 1Panel, an open source Linux server operation and maintenance management panel prior to version 1.3.6.
What is the severity of CVE-2023-36458?
CVE-2023-36458 has a severity rating of 8.8, which is considered high.
How does CVE-2023-36458 affect the software?
CVE-2023-36458 affects 1Panel versions prior to 1.3.6 and allows an authenticated attacker to achieve command injection when entering the container terminal.
Has the vulnerability been fixed?
Yes, the vulnerability has been fixed in version 1.3.6 of 1Panel.
How can I fix CVE-2023-36458?
To fix CVE-2023-36458, make sure to update your 1Panel installation to version 1.3.6 or later.