Skip to content
Sign in
7.5 High

CVE-2023-39964 1Panel is an open source Linux server operation and maintenance management panel

Description

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the `api/v1/file.go` file, there is a function called `LoadFromFile`, which directly reads the file by obtaining the requested path `parameter[path]`. The request parameters are not filtered, resulting in a background arbitrary file reading vulnerability. Version 1.5.0 has a patch for this issue.

Affected products and versions

Product Affected versions Fixed in
1Panel 1.4.3 No fix stated
1panel 1.4.3 No fix stated

Other CVEs of 1Panel

The 16 CVEs of 1Panel →
CVE-2026-23525 1Panel is an open-source, web-based control panel for Linux server management 6.4 Medium CVE-2025-66508 1Panel is an open-source, web-based control panel for Linux server management 6.5 Medium CVE-2025-66507 1Panel is an open-source, web-based control panel for Linux server management 7.5 High CVE-2025-54424 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server 8.1 High
Track this CVE