CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
References
Configurations
History
14 Jan 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5 - Vendor Advisory |
03 Jun 2023, 03:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| First Time |
Fit2cloud cloudexplorer
Fit2cloud |
|
| CWE | CWE-862 | |
| CPE | cpe:2.3:a:fit2cloud:cloudexplorer:*:*:*:*:lite:*:*:* |
26 May 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-26 23:15
Updated : 2025-01-14 20:15
NVD link : CVE-2023-32311
Mitre link : CVE-2023-32311
JSON object : View
Products Affected
fit2cloud
- cloudexplorer
CWE
CWE-862
Missing Authorization