CVE-2021-45789

2022-09-2903:15:14

Google

osv.dev

arbitrary file read

metersphere v1.15.4

authenticated users

file download

server vulnerability

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

32.8%

JSON

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function.

References

github.com/metersphere/metersphere/issues/8652