CVE-2026-109189 fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery

A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser. Performing a manipulation of the...

CVE-2026-109189

A server-side request forgery (SSRF) vulnerability exists in fit2cloud MeterSphere versions up to 3.6.9-lts . The flaw is located within the Swagger3 Parser component, specifically in the testUrlTimeout function of the backend/parser/api/dataimport/Swagger3ParserApiDefinition.java file. By manipu...