Lucene search
HistoryJun 11, 2024 - 3:16 p.m.
CVE-2024-37161
metersphere
cross-site scripting
vulnerability
4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system’s step editor stores cross-site scripting vulnerabilities. Version 1.10.1-lts fixes this issue.
Related
cvelist
cvelist
CVE-2024-37161 MeterSphere front-end editor stores XSS vulnerability
2024-06-11 14:07:12
cve
cve
CVE-2024-37161
2024-06-11 15:16:09
vulnrichment
vulnrichment
CVE-2024-37161 MeterSphere front-end editor stores XSS vulnerability
2024-06-11 14:07:12
4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-37161