Cloudexplorer Lite

cloudexplorer_lite

Vendor: Fit2cloud • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-50612 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Jan 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain sensitive information via the cloud accounts parameter.
CVE-2023-44397 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Oct 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with `matching/API/`, which can cause a p...Show more CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with `matching/API/`, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.Show less
CVE-2023-42147 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Sep 20, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component.
CVE-2023-39519 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Aug 24, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has b...Show more Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has been fixed in version 1.4.0. Show less
CVE-2023-38692 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Aug 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been...Show more CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been fixed in v1.3.1. There are no known workarounds aside from upgrading.Show less
CVE-2023-34240 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Jun 27, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system secu...Show more Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security. Versions of cloudexplorer-lite prior to 1.2.0 did not enforce strong passwords. This vulnerability has been fixed in version 1.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-3423 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 Jun 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.
CVE-2023-2845 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 May 23, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.
CVE-2023-2844 1Fit2cloud 1Cloudexplorer Lite Jun 17, 2026 May 23, 2023 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.