CVE-2023-50267 MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds...

CVE-2023-50267

MeterSphere (open source continuous testing platform) has a horizontal privilege escalation vulnerability tracked as CVE-2023-50267. Before version 2.10.10-lts, an authenticated attacker could update resources that do not belong to them if they know the resource ID. The issue is fixed in 2.10.10-...

CVE-2023-50267 MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds...

MeterSphere Security Vulnerabilities

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A security vulnerability exists in versions prior to MeterSphere 2.10.10-lts, which stems from the fact that an authenticated attacker can update a resource that does not belong to him with a known resource...