7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.4%
CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with matching/API/
, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.
[
{
"vendor": "CloudExplorer-Dev",
"product": "CloudExplorer-Lite",
"versions": [
{
"version": "< 1.4.1",
"status": "affected"
}
]
}
]
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
9.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
43.4%