1Panel 容器终端 命令注入漏洞(CVE-2023-36458)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-36458
• https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7x2c-fgx6-xf9h
• https://www.nsfocus.net/vulndb/83689
• https://github.com/advisories/GHSA-7x2c-fgx6-xf9h
• https://cve.imfht.com/detail/CVE-2023-36458?lang=en
• https://access.redhat.com/security/cve/cve-2023-36458
• http://vulert.com/vuln-db/CVE-2023-36458
• https://db.gcve.eu/vuln/cve-2023-36458

Related Vulnerabilities

• 飞致云 1Panel 未授权 设计缺陷漏洞
• 飞致云 1Panel 身份验证缺陷漏洞
• 飞致云 1Panel 需授权 命令注入漏洞
• PoC1Panel 远程命令执行漏洞
• PoCCVE-2024-39907: 1Panel SQL Injection - Authenticated
• PoC1panel-loadfile-fileread: 1Panel loadfile 后台文件读取漏洞
• （CVE-2025-4546）1Panel MaxKB知识库模块CSV注入漏洞
• 1Panel CVE-2024-39911 SQL注入漏洞
• 1Panel 前台面板SQL注入导致RCE漏洞
• 1Panel loadfile 任意文件读取漏洞
• 1Panel CVE-2024-2352 命令注入漏洞