Security

SECURITY.md

安全说明

如果您发现安全问题，请直接联系我们：

感谢您的支持！

Security Policy

All security bugs should be reported to the contact as below:

Thanks for your support!

The gateway filter of CloudExplorer Lite uses a controller with path. startwith matching/API/, which can cause permission bypass
GHSA-fqxr-7g94-vrfj published Oct 27, 2023 by baixin513

Low
There is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite
GHSA-hh2g-77xq-x4vq published Aug 24, 2023 by baixin513

Moderate
Command injection vulnerability in module management function in CloudExplorer Lite
GHSA-7wrc-f42m-9v5w published Aug 3, 2023 by baixin513

Moderate
The web app does not verify weak password at backend in cloudexplorer-dev/cloudexplorer-lite
GHSA-px4m-5j22-5mw4 published Jun 27, 2023 by baixin513

Moderate
Users can add themselves to any organization in CloudExplorer Lite
GHSA-cp3j-437h-4vwj published May 23, 2023 by baixin513

High
The CloudExplorer Lite project has a vulnerability that allows attackers to arbitrarily add, delete, or modify workspaces within an organization
GHSA-hxjq-g9qv-pwq5 published May 23, 2023 by baixin513

High

Learn more about advisories related to 1Panel-dev/CloudExplorer in the GitHub Advisory Database