Vulnerability · Published Jul 18, 2024 · Assigned by GitHub_M

CVE-2024-39907a sqlinjection in 1Panel

Critical 9.8

In plain English

A critical-severity SQL injection in 1Panel from 1Panel-dev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 29.2% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)29.2%top 1.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/1Panel-dev/1Panel	1.10.12-tls	GHSA-5grx-v727-qmq6
Go	github.com/1Panel-dev/1Panel	no fix listed	GO-2024-2990

Affected products (as reported)

Vendor	Product	Versions
1Panel-dev	1Panel	>= 1.10.9-tls, < 1.10.12-tls

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6 x_refsource_CONFIRM