CVE-2026-109189

A server-side request forgery (SSRF) vulnerability exists in fit2cloud MeterSphere versions up to 3.6.9-lts . The flaw is located within the Swagger3 Parser component, specifically in the testUrlTimeout function of the backend/parser/api/dataimport/Swagger3ParserApiDefinition.java file. By manipu...