CVE-2023-2844 - Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Back Back to CVE browser

MEDIUM

Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Published May 23, 2023

4.9

MEDIUM

CVSS 3.1

EPSS 0.68%

Description

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

Affected products

Vendor Cloudexplorer-Dev Product Cloudexplorer-Dev/cloudexplorer-Lite Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <v1.1.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cloudexplorer-Dev

Cloudexplorer-Dev/cloudexplorer-Lite

n/a

Version	Status	Constraints
unspecified	affected	<v1.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a
Patch
https://huntr.dev/bounties/6644b36e-603d-4dbe-8ee2-5df8b8fb2e22
ExploitIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a		Patch
https://huntr.dev/bounties/6644b36e-603d-4dbe-8ee2-5df8b8fb2e22		ExploitIssue TrackingPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published May 23, 2023

Updated Feb 12, 2025

Reserved May 23, 2023

Link CVE-2023-2844

CISA Vulnrichment

Updated Jan 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-2844

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-2844