Lucene search
+L

1 matches found

OSV
OSV
added 2022/12/14 1:9 p.m.26 views

CVE-2022-23512 Metersphere is vulnerable to Path Injection.

MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value testId in new...

7.7CVSS8AI score0.00827EPSS
SaveExploits1References3
Rows per page
Query Builder