Skip to content
OpenAdvisories

Product · fit2cloud

MeterSphere

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3ParserApiDefinition.testUrlTimeout server-side request forgery

    A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/api/dataimport/Swagger3ParserApiDefinition.java of the component Swagger3 Parser.…