CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function...

CVE-2021-45789

CVE-2021-45789 affects Metersphere v1.15.4, where authenticated users can read arbitrary files on the server via the file download function. The vulnerability details indicate impact to confidentiality (high) with no stated impact on integrity or availability. The available connected sources desc...