CVE-2023-44397
CloudExplorer Lite permission bypass vulnerability
Résumé
CloudExplorer Lite permission bypass vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov