CVE-2021-45789

2021-12-2711:51:55

mitre

www.cve.org

arbitrary file read

metersphere v1.15.4

authenticated users

file download function

server vulnerability

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

32.8%

JSON

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function.

References

github.com/metersphere/metersphere/issues/8652