CVE Intelligence

Vulnerabilidades do Metersphere Metersphere

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Metersphere Metersphere: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:metersphere:metersphere

CVE-2025-62604 Alta · 7.5 CWE-200 22/10/2025
MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.