CVE-2023-44397
CloudExplorer Lite permission bypass vulnerability
概要
CloudExplorer Lite permission bypass vulnerability
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov