CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Cvelist•added 2023/05/23 12:0 a.m.•33 views

CVE-2023-2844 Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

7.2CVSS5.4AI score0.00676EPSS

Exploits1References2

Vulnrichment•added 2023/05/23 12:0 a.m.•10 views

CVE-2023-2844 Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

7.2CVSS5.2AI score0.00676EPSS

Exploits1References2

CVE•added 2023/05/23 12:0 a.m.•81 views

CVE-2023-2844

CVE-2023-2844 affects cloudexplorer-lite prior to v1.1.0. The issue is an authorization bypass via a user-controlled key caused by missing authorization checks in the GitHub repository cloudexplorer-dev/cloudexplorer-lite. A PoC in Huntr shows an IDOR-style bypass where a user can impersonate ano...

7.2CVSS5.4AI score0.00676EPSS

Exploits1References2Affected Software1