Описание
CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.4.1 (исключая)
cpe:2.3:a:fit2cloud:cloudexplorer_lite:*:*:*:*:*:*:*:*
EPSS
Процентиль: 4%
0.0002
Низкий
7.5 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-287
EPSS
Процентиль: 4%
0.0002
Низкий
7.5 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-287