CVE-2023-39519
CloudExplorer Lite sensitive information leakage vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
CloudExplorer Lite sensitive information leakage vulnerability
| Assigner | GitHub_M |
| Reserved | 2023-08-03 |
| Published | 2023-08-24 |
| Updated | 2024-10-02 |
Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has been fixed in version 1.4.0.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-hh2g-77xq-x4vq
https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/releases/tag/v1.4.0
