Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/12/14 1:09 p.m.34 views

CVE-2022-23512 Metersphere is vulnerable to Path Injection.

MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value testId in new...

7.7CVSS8.4AI score0.00827EPSS
SaveExploits1References1
Rows per page
Query Builder