Back to Database
Status published
High
CVE-2023-32316
Users can add themselves to any organization in CloudExplorer Lite
Vulnerability Description
CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-32316
Credits & Attribution
No credits recorded in the NVD database.
References
More from CloudExplorer-Dev
View All →CVE-2023-44397
CloudExplorer Lite permission bypass vulnerability
High
7.5
CVE-2023-39519
CloudExplorer Lite sensitive information leakage vulnerability
High
7.5
CVE-2023-38692
Command injection vulnerability in module management function in CloudExplorer Lite
Critical
9.8
CVE-2023-34240
Weak passwords allowed in cloudexplorer-lite
Medium
6.5
CVE-2023-32311
The CloudExplorer Lite missing permissions check
High
7.1
Affected Vendor
CloudExplorer-Dev
View all reports →Affected Software
CloudExplorer-Lite
Vulnerable Versions:
< 1.1.0
Timeline
Official Publish:
May 26th, 2023
Last Modified:
January 14th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N