Design/Logic Flaw

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some...

CVE-2023-30550

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some...

CVE-2023-30550: Authorization Bypass Through User-Controlled Key

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some...

PT-2023-22777

Name of the Vulnerable Software and Affected Versions MeterSphere versions prior to 2.9.0 Description The issue is an IDOR vulnerability that allows the administrator of a project to modify other projects under the workspace, potentially granting an attacker some operating permissions. MeterSpher...

PT-2022-15877

Name of the Vulnerable Software and Affected Versions ZTE ZXMP M721 product affected versions not specified Description The issue concerns a permission and access control vulnerability. The folder permission viewed by sftp is 666, which is inconsistent with the actual permission. This inconsisten...