CVE-2023-32311: Authorization Bypass in CloudExplorer Lite

CVE-2023-32311 describes an authorization bypass in CloudExplorer Lite, an open source cloud management platform. The vulnerability allows unprivileged users to add themselves to any organization without proper permission checks. In multi-tenant environments this flaw undermines tenant isolation, enabling uncontrolled access to resources belonging to other organizations.

The vulnerability is rated CVSS 7.1 (High). The fix was available since May 2023 in version 1.1.0. However a GitHub signal without description suggests renewed interest in this vulnerability after three years, potentially indicating exploit publication or resurgence of research community attention.

Administrators managing CloudExplorer Lite instances must immediately verify the installed version and upgrade to v1.1.0 or later. It is also recommended to examine organization access logs from May 2023 onwards to identify potential unauthorized additions. No alternative mitigations exist; patching is mandatory.