CVE-2023-32316 Users can add themselves to any organization in CloudExplorer Lite

High 7.1 Published 26 May 2023 Updated 14 Jan 2025

Exploited in the wild: Not known
Fix: None listed

What is CVE-2023-32316?

CVE-2023-32316 is a high-severity vulnerability in CloudExplorer-Dev CloudExplorer-Lite, published on 26 May 2023.

Official description

CloudExplorer Lite is an open source cloud management tool. In affected versions users can add themselves to any organization in CloudExplorer Lite. This is due to a missing permission check on the user profile. It is recommended to upgrade the version to v1.1.0. There are no known workarounds for this vulnerability.

Weakness: CWE-862

Which versions are affected by CVE-2023-32316?

It affects 1 product.

Products include Fit2cloud Cloudexplorer.

How do I fix CVE-2023-32316?

No fix has been published for CVE-2023-32316 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-32316 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-32316 exists.

CVE-2023-32311 The CloudExplorer Lite missing permissions check High 7.1

Sources

Also known as GHSA-cp3j-437h-4vwj.