{"id":"CVE-2023-39965","aliases":["EUVD-2023-2240","GHSA-85cf-gj29-f555","GO-2023-2005"],"status":"published","title":"1Panel Unauthorized access in Backend","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00441,"percentile":0.38776,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2023-08-10T17:42:05Z","modified":"2026-10-28T02:30:32Z","fixes":[{"ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","fixed_in":["1.5.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.3"},{"last_affected":"1.4.3"},{"fixed":"1.5.0"}]}],"versions":["1.4.3"]},{"source":"osv","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.3"},{"fixed":"1.5.0"}]}],"versions":["1.4.3"]},{"source":"osv","ecosystem":"Go","package":"github.com/1Panel-dev/1Panel","ranges":[{"type":"SEMVER","events":[{"introduced":"1.4.3"},{"fixed":"1.5.0"}]}]}],"products":[{"vendor":"1panel-dev","product":"1panel"},{"vendor":"fit2cloud","product":"1panel"}],"references":[{"url":"https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-85cf-gj29-f555","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","web"]},{"url":"https://github.com/1Panel-dev/1Panel/releases/tag/v1.5.0","tags":["x_refsource_MISC","x_transferred","Product","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39965","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-85cf-gj29-f555"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39965.json","tags":["advisory"]},{"url":"https://github.com/1Panel-dev/1Panel","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-39965","title":"1Panel Unauthorized access in Backend","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.\n","status":"published","published":"2023-08-10T17:42:05.793Z","modified":"2024-10-04T18:57:04.477Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-2240","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.\n","status":"published","published":"2023-08-10T17:42:05Z","modified":"2024-10-04T18:57:04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:27:50.41571Z"}],"ghsa":[{"id":"GHSA-85cf-gj29-f555","title":"1Panel Arbitrary File Download vulnerability","description":"### Summary\nAny file downloading vulnerability exists in 1Panel backend.\n\n### Details\nAuthenticated attackers can download arbitrary files through the API interface. This code has unauthorized access.\n![image](https://user-images.githubusercontent.com/116613486/257246024-d0e35800-5fd8-4907-8b1b-504afaad859e.png)\n\n### PoC\npayload:\n\nPOST /api/v1/files/download/bypath HTTP/1.1\nHost: ip\nContent-Type: application/json\n\n{\"path\":\"/etc/passwd\"}\n\n![f77959349e96543436eea18283fa75c](https://user-images.githubusercontent.com/116613486/257245459-13f2f31b-fcfe-4a27-ba52-e2f1e5d4d749.png)\n\n\n### Impact\nAttackers can freely download the file content on the target system. This will be caused a large amount of information leakage.\n","status":"published","published":"2023-08-10T20:09:24Z","modified":"2023-11-12T05:02:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:37:21.209096Z"}],"nvd":[{"id":"CVE-2023-39965","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.\n","status":"published","published":"2023-08-10T18:15:11.213Z","modified":"2026-06-17T06:13:02.837Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:08:22.812138Z"}],"osv":[{"id":"CVE-2023-39965","title":"1Panel Unauthorized access in Backend","description":"1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access. Attackers can freely download the file content on the target system. This may cause a large amount of information leakage. Version 1.5.0 has a patch for this issue.\n","status":"published","published":"2023-08-10T17:42:05.793Z","modified":"2026-10-28T02:30:32.049229615Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"GHSA-85cf-gj29-f555","title":"1Panel Arbitrary File Download vulnerability","description":"### Summary\nAny file downloading vulnerability exists in 1Panel backend.\n\n### Details\nAuthenticated attackers can download arbitrary files through the API interface. This code has unauthorized access.\n![image](https://user-images.githubusercontent.com/116613486/257246024-d0e35800-5fd8-4907-8b1b-504afaad859e.png)\n\n### PoC\npayload:\n\nPOST /api/v1/files/download/bypath HTTP/1.1\nHost: ip\nContent-Type: application/json\n\n{\"path\":\"/etc/passwd\"}\n\n![f77959349e96543436eea18283fa75c](https://user-images.githubusercontent.com/116613486/257245459-13f2f31b-fcfe-4a27-ba52-e2f1e5d4d749.png)\n\n\n### Impact\nAttackers can freely download the file content on the target system. This will be caused a large amount of information leakage.\n","status":"published","published":"2023-08-10T20:09:24Z","modified":"2026-09-10T03:49:57.566163225Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:46:41.732368Z"},{"id":"GO-2023-2005","title":"1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel","description":"1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel","status":"published","published":"2024-08-21T14:17:52Z","modified":"2026-03-03T04:54:06.736368Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}