CVE-2023-32316

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published May 26, 2023
Updated: Jan 14, 2025
CWE ID 862

Summary

CVE-2023-32316 is a vulnerability affecting CloudExplorer Lite, an open-source cloud management tool. The issue lies in a missing permission check on user profiles, enabling users to add themselves to any organization within the tool. This flaw poses a significant risk to the security of the affected CloudExplorer Lite instances. To mitigate this vulnerability, it is strongly advised to upgrade the software to version 1.1.0. Unfortunately, there are currently no known workarounds to apply to older versions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share