Go/github.com/1Panel-dev/1Panel CVE-2024-2352: medium 6.3, EPSS 3.04%
1Panel is vulnerable to command injection
Action: Upgrade github.com/1Panel-dev/1Panel to 1.10.1-lts or later.
go get github.com/1Panel-dev/1Panel@v1.10.1-ltsAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.1-lts | - |
Fixed versions
| 1.10.1-lts |
Sources
- osv: GHSA-x2vg-5wrf-vj6v
- https://nvd.nist.gov/vuln/detail/CVE-2024-2352
- https://github.com/1Panel-dev/1Panel/pull/4131
- https://github.com/1Panel-dev/1Panel/pull/4131#issue-2176105990
- https://github.com/1Panel-dev/1Panel/pull/4131/commits/0edd7a9f6f5100aab98a0ea6e5deedff7700396c
- https://github.com/1Panel-dev/1Panel
- https://vuldb.com/?ctiid.256304
- https://vuldb.com/?id.256304
CVE-2024-2352 · published · modified · JSON