CVE-2023-32311

HIGH

fit2cloud cloudexplorer < 1.1.0 - Missing Authorization for Organization Membership

Title source: llm

Description

CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hxjq-g9qv-pwq5

Scores

CVSS v3 7.1

EPSS 0.0038

EPSS Percentile 30.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-862

Status published

Products (1)

fit2cloud/cloudexplorer < 1.1.0

Published May 26, 2023

Tracked Since Feb 18, 2026