CVE-2023-36458
MediumCVSS 6.3Exploitation Probability (EPSS)
High risk78th percentile - higher than 78% of all known CVEs
Summary
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker could craft malicious payloads to achieve command injection when entering the container terminal.
Risk Assessment
This vulnerability could allow an attacker to execute arbitrary commands on the system, posing a serious security risk to the server.
Recommendation
It is recommended to upgrade to version 1.3.6 or later to mitigate this vulnerability.
Original NVD description (English source)
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payloads to achieve command injection when entering the container terminal. The vulnerability has been fixed in v1.3.6.