CVE-2023-32311

The CloudExplorer Lite missing permissions check

CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

Affected

CloudExplorer-Dev · CloudExplorer-Lite

CVSS v3.1 GitHub_M

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.38% chance of exploitation in the next 30 days, 32nd percentile

Published

2023-05-26

Updated

2025-01-14

Proof-of-concept exploits (1)

• krevetkqqq/CVE-2023-32311Repo stars 0★ · pushed 2026-10-30 · find archive

CVE references

• CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5REFERENCE

References

• CVE Record
• NVD entry

Related

• CVE-2014-8361
• CVE-2014-9583
• CVE-2019-7256
• CVE-2020-8958
• CVE-2021-27177
• CVE-2022-40624