CVE-2022-23512: Improper Limitation of a Pathname to a Restricted Directory

MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value testId in new...

MeterSphere 路径遍历漏洞

MeterSphere is MeterSphere open source one-stop open source continuous testing platform . MeterSphere version 2.4.1 before the existence of path traversal vulnerability , the vulnerability stems from easy to ApiTestCaseService::deleteBodyFiles in the path injection attack , the attacker can use t...