Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization through the APIExport VirtualWorkspace. An attacker can create and delete objects in arbitrary target workspaces without the necessary permissions by exploiting this vulnerability. Workaround This vulnerability ca...

MeterSphere 安全漏洞

MeterSphere is MeterSphere's open source one-stop open source continuous testing platform. A security vulnerability exists in versions prior to MeterSphere 2.10.14-lts, which stems from an unauthorized member being able to overstep their rights to view member information in other workspaces...

PT-2024-24594

Name of the Vulnerable Software and Affected Versions MeterSphere versions prior to 2.10.14-lts Description The issue allows members without space permissions to view member information from other workspaces beyond their authority. Recommendations For versions prior to 2.10.14-lts, update to...