CVE-2023-39966
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
In version 1.4.3 of the 1Panel, there is an arbitrary file write vulnerability that could lead to direct control of the server. The issue arises from a lack of parameter filtering in the `SaveContent` function in the `api/v1/file.go` file.
Risk Assessment
This vulnerability could allow attackers to gain control over the server, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to upgrade to version 1.5.0, which contains a patch that addresses this vulnerability.
Other vulnerabilities in 1Panel
See all- CVE-2025-34430Medium
CSRF vulnerability in 1Panel versions 1.10.33 through 2.0.15 in the panel name management functionality. Lack of CSRF defenses (tokens, Origin/Referer validation) allows an attacker to change the victim's panel name without consent via a crafted webpage.
- CVE-2025-34429High
CSRF vulnerability in 1Panel versions 1.10.33 to 2.0.15 in the web port configuration functionality. The port-change endpoint lacks CSRF defenses (tokens, Origin/Referer validation), allowing an attacker to change the listening port, causing loss of access on the original port and potentially exposing the service on an attacker-chosen port.
- CVE-2025-34410High
1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality. The endpoint lacks CSRF protections like anti-CSRF tokens or Origin/Referer validation, allowing an attacker to change the victim's username without consent.
- CVE-2023-39965Medium
In version 1.4.3 of the 1Panel, authenticated attackers can download arbitrary files through the API interface, leading to unauthorized access. This may result in significant information leakage.
- CVE-2023-39964High
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, there is a vulnerability that allows an attacker to read arbitrary important configuration files on the server due to unfiltered request parameters.
- CVE-2023-36458Medium
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker could craft malicious payloads to achieve command injection when entering the container terminal.
- CVE-2023-36457Medium
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can craft a malicious payload to achieve command injection when adding container repositories.
Original NVD description (English source)
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file write vulnerability could lead to direct control of the server. In the `api/v1/file.go` file, there is a function called `SaveContentthat,It `recieves JSON data sent by users in the form of a POST request. And the lack of parameter filtering allows for arbitrary file write operations. Version 1.5.0 contains a patch for this issue.