CVE-2024-34352

CVSS V2 None CVSS V3 None

Description

1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. The mirror configuration write symbol `>` can be used to achieve arbitrary file writing. This vulnerability is fixed in v1.10.3-lts.

Overview

CVE ID
CVE-2024-34352

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-05-09T14:38:19.241Z

Last Modified Date
2024-06-04T17:41:53.726Z

Weakness Enumerations

CWE	URL
CWE-77	http://cwe.mitre.org/data/definitions/77.html

References

Reference URL	Reference Tags
https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-f8ch-w75v-c847	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-34352
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34352

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 14:38:57				Added to TrackCVE