GHSA-85cf-gj29-f555
1Panel Arbitrary File Download vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/1Panel-dev/1Panel | >= 1.4.3, < 1.5.0 | 1.5.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Summary
Any file downloading vulnerability exists in 1Panel backend.
### Details
Authenticated attackers can download arbitrary files through the API interface. This code has unauthorized access.
### PoC
payload:
POST /api/v1/files/download/bypath HTTP/1.1
Host: ip
Content-Type: application/json
{"path":"/etc/passwd"}
### Impact
Attackers can freely download the file content on the target system. This will be caused a large amount of information leakage.
References
External links from the advisory. They lead to third-party sites.