CVE-2023-39965
1Panel Arbitrary File Download vulnerability
Impact
### Summary Any file downloading vulnerability exists in 1Panel backend. ### Details Authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access.  ### PoC payload: POST /api/v1/files/download/bypath HTTP/1.1 Host: ip Content-Type: application/json {"path":"/etc/passwd"}  ### Impact Attackers can freely download the file content on the target system. This will be caused a large amount of information leakage.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/1Panel-dev/1Panel | = 1.4.3 | 1.5.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fit2cloud | 1panel | Version 1.4.3 |