CVE Intelligence

Metersphere Metersphere vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Metersphere Metersphere: 1 record(s), with affected versions and fixes.
cpe:2.3:a:metersphere:metersphere

CVE-2025-62604 High · 7.5 CWE-200 Oct 22, 2025
MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.