Skip to content
OpenAdvisories
High · 7.1 CVE-2023-32316 EUVD-2023-36563

Users can add themselves to any organization in CloudExplorer Lite

Published May 26, 2023 · Updated Jan 14, 2025 · Assigned by GitHub_M

Description

CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.

Affected products

VendorProductAffectedFixed
CloudExplorer-Dev CloudExplorer-Lite < 1.1.0 —

References