CVE-2023-37477: Command injection in firewall ip functionality in 1Panel
First published: Tue Jul 18 2023(Updated: )
### Summary An OS command injection vulnerability exists in 1Panel firewall functionality. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. ### Details 1Panel firewall functionality `/hosts/firewall/ip` endpoint read user input without validation, the attacker extends the default functionality of the application, which execute system commands. ### PoC the payload `; sleep 3 #` will lead server response in 3 seconds  the payload `; sleep 6 #` will lead server response in 6 seconds  ### Impact An attacker can execute arbitrary code on the target system, which can lead to a complete compromise of the system. ### Patches The vulnerability has been fixed in v1.4.3. ### Workarounds It is recommended to upgrade the version to v1.4.3. ### References If you have any questions or comments about this advisory: Open an issue in https://github.com/1Panel-dev/1Panel Email us at wanghe@fit2cloud.com
Credit: security-advisories@github.com security-advisories@github.com security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fit2cloud 1panel | <1.4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/1Panel-dev/1Panel/commit/e17b80cff4975ee343568ff526b62319f499005d
- https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-p9xf-74xh-mhw5
- https://github.com/1Panel-dev/1Panel/releases/tag/v1.4.3
- https://nvd.nist.gov/vuln/detail/CVE-2023-37477
- https://github.com/advisories/GHSA-p9xf-74xh-mhw5 (Advisory)
Frequently Asked Questions
What is CVE-2023-37477?
CVE-2023-37477 is an OS command injection vulnerability in 1Panel firewall functionality, allowing arbitrary command execution.
How can an attacker exploit CVE-2023-37477?
An attacker can exploit CVE-2023-37477 by sending a specially-crafted HTTP request to the 1Panel firewall functionality.
What is the severity of CVE-2023-37477?
CVE-2023-37477 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2023-37477?
Fit2cloud 1panel versions up to and including 1.4.3, and go/github.com/1Panel-dev/1Panel versions up to and including 1.4.2.
How do I fix CVE-2023-37477?
To fix CVE-2023-37477, update to Fit2cloud 1panel version 1.4.4 or later, or update go/github.com/1Panel-dev/1Panel to version 1.4.3 or later.
- collector/nvd-latest
- collector/nvd-index
- collector/nvd-cve
- collector/github-advisory-latest
- alias/GHSA-p9xf-74xh-mhw5
- alias/CVE-2023-37477
- collector/github-advisory
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/author
- agent/remedy
- agent/references
- agent/description
- agent/severity
- agent/title
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/fit2cloud
- canonical/fit2cloud 1panel
- package-manager/go