Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Metersphere HIGH 7.5
CVE-2025-62604

MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information.…

Fix: 2.10.25+
Fix from $1,950 2025-10-22
Metersphere CRITICAL 9.8
CVE-2025-53639

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not proper…

Fix: 3.6.5+
Fix from $2,300 2025-07-14
Metersphere MEDIUM 6.1
CVE-2024-37161

MeterSphere is an open source continuous testing platform. Prior to version 1.10.1-lts, the system's step editor stores cross-site scripting vulnerab…

Fix: 1.10.1+
Fix from $1,600 2024-06-11
Metersphere MEDIUM 6.5
CVE-2024-32467

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member informatio…

Fix: 2.10.14+
Fix from $1,600 2024-04-25
Metersphere CRITICAL 9.8
CVE-2023-41878

MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and perfor…

Fix: 2.10.7+
Fix from $2,300 2023-09-27
Metersphere HIGH 7.5
CVE-2023-38494

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not ha…

Fix: 2.10.4+
Fix from $1,950 2023-08-04
Metersphere CRITICAL 9.8
CVE-2023-37461

Metersphere is an opensource testing framework. Files uploaded to Metersphere may define a `belongType` value with a relative path like `../../../../…

Fix: 2.10.3+
Fix from $2,300 2023-07-17
Metersphere HIGH 8.8
CVE-2023-35937

Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This…

Fix: 2.10.2+
Fix from $1,950 2023-07-06
Metersphere MEDIUM 6.5
CVE-2023-32699

MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service. ​The `checkUserPassword` meth…

Fix: after 2.9.1
Fix from $1,600 2023-05-30
Metersphere CRITICAL 9.8
CVE-2023-29944

Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snip…

No fix yet
Fix from $2,300 2023-05-08
Metersphere MEDIUM 6.5
CVE-2023-25814

metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI …

Fix: 2.7.1+
Fix from $1,600 2023-03-09
Metersphere HIGH 7.5
CVE-2023-25573EPSS 52%

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/downl…

Fix: 1.20.19+
Fix from $1,950 2023-03-09
Metersphere HIGH 8.8
CVE-2022-46178

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. V…

Fix: 2.5.1+
Fix from $1,950 2022-12-29
Metersphere MEDIUM 6.1
CVE-2022-23544

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. V…

Fix: 2.5.0+
Fix from $1,600 2022-12-28
Metersphere HIGH 8.1
CVE-2022-23512

MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::de…

Fix: 2.4.1+
Fix from $1,950 2022-12-14
Metersphere CRITICAL 9.8
CVE-2021-45790

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where atta…

No fix yet
Fix from $2,300 2022-09-29
Metersphere HIGH 8.8
CVE-2021-45788

Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.

Patch available
Fix from $1,950 2022-09-29
Metersphere MEDIUM 6.5
CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file downloa…

No fix yet
Fix from $1,600 2022-09-29