Back to Database
Status published
High
CVE-2023-32311
The CloudExplorer Lite missing permissions check
Vulnerability Description
CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32311
Credits & Attribution
No credits recorded in the NVD database.
References
More from CloudExplorer-Dev
View All →CVE-2023-44397
CloudExplorer Lite permission bypass vulnerability
High
7.5
CVE-2023-39519
CloudExplorer Lite sensitive information leakage vulnerability
High
7.5
CVE-2023-38692
Command injection vulnerability in module management function in CloudExplorer Lite
Critical
9.8
CVE-2023-34240
Weak passwords allowed in cloudexplorer-lite
Medium
6.5
CVE-2023-32316
Users can add themselves to any organization in CloudExplorer Lite
High
7.1
Affected Vendor
CloudExplorer-Dev
View all reports →Affected Software
CloudExplorer-Lite
Vulnerable Versions:
< 1.1.0
Timeline
Official Publish:
May 26th, 2023
Last Modified:
January 14th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N