Product by Go
Github.com/1panel-dev/1panel
13 known vulnerabilities in Github.com/1panel-dev/1panel (Go), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-39907 | a sqlinjection in 1Panel | 9.8 | |
| Critical | CVE-2024-39911 | 1Panel SQL injection | 10.0 | |
| High | CVE-2023-37477 | Command injection in firewall ip functionality in 1Panel | 7.2 | |
| Critical | CVE-2024-2352 | 1Panel swap baseApi.UpdateDeviceSwap command injection | 6.3 | |
| High | CVE-2023-36457 | 1Panel vulnerable to command injection when adding container repositories | 6.3 | |
| High | CVE-2023-36458 | 1Panel vulnerable to ommand injection when entering the container terminal | 6.3 | |
| High | CVE-2024-34352 | Arbitrary file write vulnerability in 1Panel | 6.5 | |
| High | CVE-2023-39964 | 1Panel O&M management panel has a background arbitrary file reading vulnerability | 7.5 | |
| Critical | CVE-2023-39966 | 1Panel arbitrary file write vulnerability exists in the background | 7.5 | |
| Medium | CVE-2024-27288 | 1Panel: Incorrect Authorization | 6.3 | |
| Medium | CVE-2023-39965 | 1Panel Unauthorized access in Backend | 6.5 | |
| High | CVE-2024-24768 | 1Panel set-cookie is missing the Secure keyword | 6.5 | |
| Medium | CVE-2024-30257 | 1Panel's password verification is suspected to have a timing attack vulnerability | 3.9 |