CVE-2023-39519

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive information leakage in the user information acquisition of CloudExplorer Lite. The vulnerability has been fixed in version 1.4.0.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-395207.8Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allCVE-2023-395214.8Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to versioCVE-2023-395225.3goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is ableCVE-2023-395238.8ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software CVE-2023-395249.8PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO'sCVE-2023-395259.1PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traCVE-2023-395269.8PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code executioCVE-2023-395276.1PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scriptingCVE-2023-395288.6PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can be used to read any fCVE-2023-395299.1PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using thCVE-2023-39535.3A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption wCVE-2023-395309.1PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the Cust
CVE-2023-39519: Medium severity, CVSS 4.9 | Vulnix