https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-7m53-pwp6-v3f5

1Panel 出现前端 sql 注入 rce
威胁等级严重
GitHub
1Panel panel frontend SQL injection to website functionality RCE vulnerability
1Panel panel frontend SQL injection to website functionality RCE vulnerability
## 0x1 测试版本

专业版 v1.10.10-lts
社区版 v1.10.10-lts
1panel/openresty:1.21.4.3-3-1-focal


## 0x2 影响范围

网站监控功能影响 == 1panel/openresty:1.21.4.3-3-1-focal
WAF功能影响 <= 1panel/openresty:1.21.4...