CVE-2023-32316: CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is…

PriorityP420medium4.3CVSS 3.1

AVNACLPRLUINSUCNILAN

EPSS

0.38%

30.0th percentile

CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cloudexplorer-dev	cloudexplorer-lite	< 1.1.0	1.1.0
fit2cloud	cloudexplorer	< 1.1.0	1.1.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.