CVE-2024-39911

published 2024-07-18

CVE-2024-39911: 1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been…

Priority P2 63 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

1Panel is a web-based linux server management control panel. 1Panel contains an unspecified sql injection via User-Agent handling. This issue has been addressed in version 1.10.12-lts. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
1panel-dev	1panel	< 1.10.12-lts	1.10.12-lts
fit2cloud	1panel	>= 1.10.10-lts < 1.10.12-lts	1.10.12-lts
github.com	1panel-dev_1panel	>= 0 < 1.10.12-lts	1.10.12-lts

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89