Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-32467 EUVD-2024-30282

Meteraphsere vulnerable to unauthorized viewing by workspace members

Published Apr 25, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue.

Affected products

VendorProductAffectedFixed
metersphere metersphere < 2.10.14-lts —

References