CVE-2023-32311CWE-862

The CloudExplorer Lite missing permissions check

High · published May 26, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-05-26T22:27Z
EPSS history
Timeline
  • 26 MAY 22:27Z
    The CloudExplorer Lite missing permissions check
    cvelistv5