CVE-2023-32316

CloudExplorer Lite (pre-1.1.0) contains a permission-check flaw in the user profile that lets an attacker add themselves to any organization. Affected component is the user profile handling in CloudExplorer Lite; root cause is missing authorization checks. Impact per sources is privilege escalati...

CVE-2023-32311

The CVE-2023-32311 issue affects CloudExplorer Lite prior to v1.1.0, where there is an insufficient check of organization/workspace permissions, allowing a user to add themselves to any organization. Multiple connected sources confirm this vulnerability, its fixed status in version 1.1.0, and the...