MeterSphere Denial of Service Vulnerability

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere 2.9.1 and earlier versions of a denial of service vulnerability , the vulnerability stems from the submission of a very long password during login , it will force the system to perform a long password MD5 encryption process , an attacker can use this vulnerability to cause the server to run out of CPU and memory , resulting in a denial of service attack on the server .