Vulnerabilidades de Metersphere
CVEs publicadas que afetam produtos de Metersphere: 1 registro(s), com severidade, exploração e correções.
CVE-2025-62604
Alta · 7.5
CWE-200 22/10/2025
MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.