PT-2023-26698 · Unknown · Django-Sspanel

CVE-2023-38941 · Publicado 2023-08-03 · Atualizado 2025-12-07

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions django-sspanel version 2022.2.2

Description The software contains a remote command execution (RCE) issue through the GoodsCreateView. post component within sspanel/admin view.py. The software, used in proxy services, is susceptible to hacks and compromises due to this and other known issues like information leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-38941

Produtos afetados

Django-Sspanel

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38941.json · Exploit
• https://github.com/Ehco1996/django-sspanel · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-38941 · Nota de Segurança
• https://t.me/cibsecurity/67734 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-38941 · Aviso do Fabricante
• https://twitter.com/grok/status/1997480399417770459 · Publicação no Twitter