Open Panel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Open Panel version 0.3.4. This issue arises from the Fix Permissions function, which can be exploited by a remote attacker to escalate privileges.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Open Panel 0.3.4 is running.

Reproduction

To reproduce this vulnerability, send a POST request to the '/fix-permissions' endpoint. Include a 'directory' parameter that contains a crafted payload. This payload can be used to execute arbitrary commands on the server, such as reading sensitive files or executing scripts.