metersphere kayıtları
metersphere üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %47,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-862 Missing Authorization2
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2023-25573Kavram kanıtı | Improper access control to download file in meterspheremetersphere · metersphere · CWE-862 | Yüksek7,5 | — | %51,6 | 9 Mar 2023 |
40Planlayın | CVE-2023-29944İstismar yok | Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution.metersphere · metersphere · CWE-78 | Kritik9,8 | — | %2,0 | 7 May 2023 |
40Planlayın | CVE-2021-45790İstismar yok | An arbitrary file upload vulnerability was found in Metersphere v1.15.4.metersphere · metersphere · CWE-434 | Kritik9,8 | — | %1,9 | 28 Eyl 2022 |
39İzleyin | CVE-2023-41878İstismar yok | Weak password of selenium VNC in MeterSpheremetersphere · metersphere · CWE-798 | Kritik9,8 | — | %0,6 | 27 Eyl 2023 |
39İzleyin | CVE-2023-37461İstismar yok | Path traversal in meterspheremetersphere · metersphere · CWE-22 | Kritik9,8 | — | %0,6 | 17 Tem 2023 |
36İzleyin | CVE-2021-45788İstismar yok | Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.metersphere · metersphere · CWE-89 | Yüksek8,8 | — | %3,0 | 28 Eyl 2022 |
35İzleyin | CVE-2022-46178İstismar yok | Path Traversal In MeterSpere allows file upload to any pathmetersphere · metersphere · CWE-22 | Yüksek8,8 | — | %0,7 | 29 Ara 2022 |
35İzleyin | CVE-2023-35937İstismar yok | Metersphere missing permission checkmetersphere · metersphere · CWE-862 | Yüksek8,8 | — | %0,7 | 6 Tem 2023 |
32İzleyin | CVE-2022-23512İstismar yok | Metersphere is vulnerable to Path Injection.metersphere · metersphere · CWE-22 | Yüksek8,1 | — | %0,8 | 14 Ara 2022 |
30İzleyin | CVE-2023-38494İstismar yok | The cloud version of the MeterSphere interface leaks some sensitive data without authenticationmetersphere · metersphere · CWE-200 | Yüksek7,5 | — | %0,4 | 4 Ağu 2023 |
26İzleyin | CVE-2021-45789İstismar yok | An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the filmetersphere · metersphere | Orta6,5 | — | %0,9 | 28 Eyl 2022 |
26İzleyin | CVE-2023-25814İstismar yok | Arbitrary File Read Vulnerability in meterspheremetersphere · metersphere · CWE-22 | Orta6,5 | — | %0,8 | 9 Mar 2023 |
26İzleyin | CVE-2023-32699İstismar yok | MeterSphere denial of service vulnerabilitymetersphere · metersphere · CWE-770 | Orta6,5 | — | %0,5 | 30 May 2023 |
26İzleyin | CVE-2024-32467İstismar yok | Meteraphsere vulnerable to unauthorized viewing by workspace membersmetersphere · metersphere · CWE-200 | Orta6,5 | — | %0,5 | 25 Nis 2024 |
25İzleyin | CVE-2022-23544Kavram kanıtı | Server-Side Request Forgery in Metersphere leads to Cross-Site Scriptingmetersphere · metersphere · CWE-79 | Orta6,1 | — | %1,7 | 27 Ara 2022 |
24İzleyin | CVE-2024-37161İstismar yok | MeterSphere front-end editor stores XSS vulnerabilitymetersphere · metersphere · CWE-79 | Orta6,1 | — | %0,3 | 11 Haz 2024 |
21İzleyin | CVE-2025-62604İstismar yok | MeterSphere logic flaw allows retrieval of arbitrary user informationmetersphere · metersphere · CWE-200 | Orta5,3 | — | %0,4 | 22 Eki 2025 |
20İzleyin | CVE-2025-53639İstismar yok | Metersphere has SQL Injection Vulnerability in Sorting Fieldmetersphere · metersphere · CWE-89 | Orta5,1 | — | %0,4 | 14 Tem 2025 |
18İzleyin | CVE-2023-30550İstismar yok | IDOR vulnerability exists in meterspheremetersphere · metersphere · CWE-639 | Orta4,5 | — | %0,6 | 4 May 2023 |
17İzleyin | CVE-2023-50267İstismar yok | MeterSphere horizontal privilege escalation vulnerability of resources in project scope.metersphere · metersphere · CWE-269 | Orta4,3 | — | %0,3 | 28 Ara 2023 |
17İzleyin | CVE-2024-36118İstismar yok | Unauthorized viewing of workspace test cases in MeterSpheremetersphere · metersphere · CWE-200 | Orta4,3 | — | %0,2 | 30 May 2024 |
- CVE-2023-2557345Planlayın
Improper access control to download file in metersphere
YüksekCVSS 7,5Kavram kanıtıEPSS %51metersphere · metersphere9 Mar 2023
- CVE-2023-2994440Planlayın
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution.
KritikCVSS 9,8İstismar yokEPSS %2metersphere · metersphere7 May 2023
- CVE-2021-4579040Planlayın
An arbitrary file upload vulnerability was found in Metersphere v1.15.4.
KritikCVSS 9,8İstismar yokEPSS %1metersphere · metersphere28 Eyl 2022
- CVE-2023-4187839İzleyin
Weak password of selenium VNC in MeterSphere
KritikCVSS 9,8İstismar yokEPSS %0metersphere · metersphere27 Eyl 2023
- CVE-2023-3746139İzleyin
Path traversal in metersphere
KritikCVSS 9,8İstismar yokEPSS %0metersphere · metersphere17 Tem 2023
- CVE-2021-4578836İzleyin
Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.
YüksekCVSS 8,8İstismar yokEPSS %3metersphere · metersphere28 Eyl 2022
- CVE-2022-4617835İzleyin
Path Traversal In MeterSpere allows file upload to any path
YüksekCVSS 8,8İstismar yokEPSS %0metersphere · metersphere29 Ara 2022
- CVE-2023-3593735İzleyin
Metersphere missing permission check
YüksekCVSS 8,8İstismar yokEPSS %0metersphere · metersphere6 Tem 2023
- CVE-2022-2351232İzleyin
Metersphere is vulnerable to Path Injection.
YüksekCVSS 8,1İstismar yokEPSS %0metersphere · metersphere14 Ara 2022
- CVE-2023-3849430İzleyin
The cloud version of the MeterSphere interface leaks some sensitive data without authentication
YüksekCVSS 7,5İstismar yokEPSS %0metersphere · metersphere4 Ağu 2023
- CVE-2021-4578926İzleyin
An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the fil
OrtaCVSS 6,5İstismar yokEPSS %0metersphere · metersphere28 Eyl 2022
- CVE-2023-2581426İzleyin
Arbitrary File Read Vulnerability in metersphere
OrtaCVSS 6,5İstismar yokEPSS %0metersphere · metersphere9 Mar 2023
- CVE-2023-3269926İzleyin
MeterSphere denial of service vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0metersphere · metersphere30 May 2023
- CVE-2024-3246726İzleyin
Meteraphsere vulnerable to unauthorized viewing by workspace members
OrtaCVSS 6,5İstismar yokEPSS %0metersphere · metersphere25 Nis 2024
- CVE-2022-2354425İzleyin
Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1metersphere · metersphere27 Ara 2022
- CVE-2024-3716124İzleyin
MeterSphere front-end editor stores XSS vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0metersphere · metersphere11 Haz 2024
- CVE-2025-6260421İzleyin
MeterSphere logic flaw allows retrieval of arbitrary user information
OrtaCVSS 5,3İstismar yokEPSS %0metersphere · metersphere22 Eki 2025
- CVE-2025-5363920İzleyin
Metersphere has SQL Injection Vulnerability in Sorting Field
OrtaCVSS 5,1İstismar yokEPSS %0metersphere · metersphere14 Tem 2025
- CVE-2023-3055018İzleyin
IDOR vulnerability exists in metersphere
OrtaCVSS 4,5İstismar yokEPSS %0metersphere · metersphere4 May 2023
- CVE-2023-5026717İzleyin
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
OrtaCVSS 4,3İstismar yokEPSS %0metersphere · metersphere28 Ara 2023
- CVE-2024-3611817İzleyin
Unauthorized viewing of workspace test cases in MeterSphere
OrtaCVSS 4,3İstismar yokEPSS %0metersphere · metersphere30 May 2024