CVE-2023-38692

CriticalCVSS 9.8

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.81%

85th percentile - higher than 85% of all known CVEs

Summary

CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management.

Risk Assessment

This vulnerability could allow attackers to execute arbitrary commands on the server, posing a serious security threat to the system.

Recommendation

It is recommended to upgrade to version 1.3.1 or later to mitigate this vulnerability.

Original NVD description (English source)

CloudExplorer Lite is an open source, lightweight cloud management platform. Versions prior to 1.3.1 contain a command injection vulnerability in the installation function in module management. The vulnerability has been fixed in v1.3.1. There are no known workarounds aside from upgrading.