{"id":"CVE-2023-39964","aliases":["EUVD-2023-2334","GHSA-pv7q-v9mv-9mh5","GO-2023-2004"],"status":"published","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00972,"percentile":0.62393,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2023-08-10T17:39:11Z","modified":"2026-10-28T02:30:22Z","fixes":[{"ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","fixed_in":["1.5.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.3"},{"last_affected":"1.4.3"},{"fixed":"1.5.0"}]}],"versions":["1.4.3"]},{"source":"osv","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.3"},{"fixed":"1.5.0"}]}],"versions":["1.4.3"]},{"source":"osv","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.3"},{"fixed":"1.5.0"}]}]}],"products":[{"vendor":"1panel-dev","product":"1panel"},{"vendor":"fit2cloud","product":"1panel"}],"references":[{"url":"https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-pv7q-v9mv-9mh5","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","web"]},{"url":"https://github.com/1Panel-dev/1Panel/releases/tag/v1.5.0","tags":["x_refsource_MISC","x_transferred","Product","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39964","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pv7q-v9mv-9mh5"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39964.json","tags":["advisory"]},{"url":"https://github.com/1Panel-dev/1Panel","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-39964","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.","status":"published","published":"2023-08-10T17:39:11.768Z","modified":"2024-10-04T18:57:45.505Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-2334","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.","status":"published","published":"2023-08-10T17:39:11Z","modified":"2024-10-04T18:57:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:27:50.41571Z"}],"ghsa":[{"id":"GHSA-pv7q-v9mv-9mh5","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability","description":"### Summary\nArbitrary file reads allow an attacker to read arbitrary important configuration files on the server.\n\n### Details\nIn the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the file by obtaining the requested path parameter[path]. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability\n![picture1](https://user-images.githubusercontent.com/136411443/257109786-1b0af1e7-346f-4e92-9da2-d977f2f7fe6a.jpg)\n\n### PoC\nRequest /api/v1/files/loadfile, carry /etc/passwd data to read, as shown below:\n![微信图片_20230731112833](https://user-images.githubusercontent.com/136411443/257109931-108fc16f-e180-4d1e-996c-d9da5f76559f.png)\n\n\n### Impact\n1Panel v1.4.3\n","status":"published","published":"2023-08-10T20:09:07Z","modified":"2023-11-12T05:02:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:37:21.209096Z"}],"nvd":[{"id":"CVE-2023-39964","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.","status":"published","published":"2023-08-10T18:15:11.043Z","modified":"2026-06-17T06:13:02.71Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:08:22.812138Z"}],"osv":[{"id":"CVE-2023-39964","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.","status":"published","published":"2023-08-10T17:39:11.768Z","modified":"2026-10-28T02:30:22.929970131Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"GHSA-pv7q-v9mv-9mh5","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability","description":"### Summary\nArbitrary file reads allow an attacker to read arbitrary important configuration files on the server.\n\n### Details\nIn the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the file by obtaining the requested path parameter[path]. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability\n![picture1](https://user-images.githubusercontent.com/136411443/257109786-1b0af1e7-346f-4e92-9da2-d977f2f7fe6a.jpg)\n\n### PoC\nRequest /api/v1/files/loadfile, carry /etc/passwd data to read, as shown below:\n![微信图片_20230731112833](https://user-images.githubusercontent.com/136411443/257109931-108fc16f-e180-4d1e-996c-d9da5f76559f.png)\n\n\n### Impact\n1Panel v1.4.3\n","status":"published","published":"2023-08-10T20:09:07Z","modified":"2026-09-10T03:50:03.031366716Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:53.700556Z"},{"id":"GO-2023-2004","title":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability in github.com/1Panel-dev/1Panel","description":"1Panel O\u0026M management panel has a background arbitrary file reading vulnerability in github.com/1Panel-dev/1Panel","status":"published","published":"2024-08-21T14:17:52Z","modified":"2026-03-03T04:54:06.805485Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}