Metersphere vulnerabilities

Products

• Metersphere 22

Newest

• fit2cloud metersphere fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery CVE-2026-109189 5.3 MediumOctober 13, 2026
• metersphere MeterSphere logic flaw allows retrieval of arbitrary user information CVE-2025-62604 5.3 MediumOctober 22, 2025
• metersphere Metersphere has SQL Injection Vulnerability in Sorting Field CVE-2025-53639 5.1 MediumJuly 14, 2025
• metersphere MeterSphere front-end editor stores XSS vulnerability CVE-2024-37161 4.0 MediumJune 11, 2024
• metersphere Unauthorized viewing of workspace test cases in MeterSphere CVE-2024-36118 3.5 LowMay 30, 2024
• metersphere Meteraphsere vulnerable to unauthorized viewing by workspace members CVE-2024-32467 5.7 MediumApril 25, 2024
• metersphere MeterSphere horizontal privilege escalation vulnerability of resources in project scope. CVE-2023-50267 4.3 MediumDecember 28, 2023
• metersphere Weak password of selenium VNC in MeterSphere CVE-2023-41878 4.6 MediumSeptember 26, 2023
• metersphere The cloud version of the MeterSphere interface leaks some sensitive data without authentication CVE-2023-38494 5.9 MediumAugust 4, 2023
• metersphere Path traversal in metersphere CVE-2023-37461 5.6 MediumJuly 17, 2023
• metersphere Metersphere missing permission check CVE-2023-35937 6.0 MediumJuly 6, 2023
• metersphere MeterSphere denial of service vulnerability CVE-2023-32699 6.5 MediumMay 30, 2023
• metersphere Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command... CVE-2023-29944 9.8 CriticalMay 8, 2023
• metersphere IDOR vulnerability exists in metersphere CVE-2023-30550 6.8 MediumMay 4, 2023
• metersphere Arbitrary File Read Vulnerability in metersphere CVE-2023-25814 7.1 HighMarch 9, 2023
• metersphere Improper access control to download file in metersphere CVE-2023-25573 EPSS 51.6% 8.6 HighMarch 9, 2023
• metersphere Path Traversal In MeterSpere allows file upload to any path CVE-2022-46178 Fix available 7.4 HighDecember 29, 2022
• metersphere Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting CVE-2022-23544 7.2 HighDecember 27, 2022
• metersphere Metersphere is vulnerable to Path Injection. CVE-2022-23512 7.7 HighDecember 14, 2022
• metersphere An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users... CVE-2021-45790 9.8 CriticalDecember 27, 2021
• metersphere An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users... CVE-2021-45789 6.5 MediumDecember 27, 2021
• metersphere Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders"... CVE-2021-45788 8.8 HighDecember 27, 2021