CVE-2023-36457
MediumCVSS 6.3Exploitation Probability (EPSS)
High risk78th percentile - higher than 78% of all known CVEs
Summary
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories.
Risk Assessment
This vulnerability could allow an attacker to execute arbitrary commands on the server, posing a serious security risk to the system.
Recommendation
It is recommended to upgrade to version 1.3.6 or later to mitigate this vulnerability.
Original NVD description (English source)
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories. The vulnerability has been fixed in v1.3.6.