PT-2023-26698 · Unknown · Django-Sspanel

Published 2023-08-03 · Updated 2025-12-07 · CVE-2023-38941

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions django-sspanel version 2022.2.2

Description The software contains a remote command execution (RCE) issue through the GoodsCreateView. post component within sspanel/admin view.py. The software, used in proxy services, is susceptible to hacks and compromises due to this and other known issues like information leaks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-38941

Affected Products

Django-Sspanel

References · 5

• https://osv.dev/vulnerability/CVE-2023-38941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-38941 · Security Note
• https://github.com/Ehco1996/django-sspanel · Note
• https://twitter.com/grok/status/1997480399417770459 · Twitter Post
• https://t.me/cibsecurity/67734 · Telegram Post