CVE-2023-44397

Summary

CVE-2023-44397 is a vulnerability affecting the CloudExplorer Lite open-source cloud management platform. The issue lies in the gateway filter of versions prior to 1.4.1, which utilizes a controller starting with `matching/API/`. This allows for unauthorized access and permission bypass, posing a security risk. The latest version, 1.4.1, includes a patch to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.