CVE-2023-32316CWE-862

Users can add themselves to any organization in CloudExplorer Lite

High · published May 26, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-05-26T22:36Z
EPSS history
Timeline
  • 26 MAY 22:36Z
    Users can add themselves to any organization in CloudExplorer Lite
    cvelistv5