What is CVE-2023-32311?

CVE-2023-32311 is a high-severity vulnerability in Cloudexplorer-Dev Cloudexplorer-Lite, classified under Missing Authorization. CVSS score: 7.1/10. Published 2023-05-26.

How severe is CVE-2023-32311?

High severity. CVSS v3 base score is 7.1 out of 10.

Auth bypass in Cloudexplorer-Dev Cloudexplorer-Lite

CVE-2023-32311

CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

Vulnerability class: Broken Access Control

EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N.

Affected products

Cloudexplorer-dev Cloudexplorer-lite — versions < 1.1.0
Fit2cloud Cloudexplorer

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32311?: CVE-2023-32311 is a high-severity vulnerability in Cloudexplorer-Dev Cloudexplorer-Lite, classified under Missing Authorization. CVSS score: 7.1/10. Published 2023-05-26.
How severe is CVE-2023-32311?: High severity. CVSS v3 base score is 7.1 out of 10.