CVE-2023-2844 HIGH

CVE-2023-2844: Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Vendor Cloudexplorer-Dev
Product cloudexplorer-dev/cloudexplorer-lite
Weakness CWE-639 · IDOR
Published May 23, 2023
Last update February 12, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

Key dates

02Disclosure timeline

May 23, 2023 CVE published
February 12, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10671 Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure CVE-2017-0882 CVE-2023-4213 Simplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change CVE-2022-2080 Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR CVE-2023-44981 Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication