CVE Intelligence

Metersphere vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Metersphere products: 1 record(s), with severity, exploitation and fixes.

Metersphere 1

Exploited only (KEV) →

CVE-2025-62604 High · 7.5 CWE-200 Oct 22, 2025
MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.