Mmetersphere

Products

Exploited and recent CVEs

• CVE-2025-62604 Medium 5.3 MeterSphere logic flaw allows retrieval of arbitrary user information 0.4%
• CVE-2025-53639 Medium 5.1 Metersphere has SQL Injection Vulnerability in Sorting Field 0.4%
• CVE-2024-37161 Medium 4.0 MeterSphere front-end editor stores XSS vulnerability 0.4%
• CVE-2024-36118 Low 3.5 Unauthorized viewing of workspace test cases in MeterSphere 0.3%
• CVE-2024-32467 Medium 5.7 Meteraphsere vulnerable to unauthorized viewing by workspace members 0.5%
• CVE-2023-50267 Medium 4.3 MeterSphere horizontal privilege escalation vulnerability of resources in project scope. 0.3%
• CVE-2023-41878 Medium 4.6 Weak password of selenium VNC in MeterSphere 0.7%
• CVE-2023-38494 Medium 5.9 The cloud version of the MeterSphere interface leaks some sensitive data without authentication 0.5%
• CVE-2023-37461 Medium 5.6 Path traversal in metersphere 0.6%
• CVE-2023-35937 Medium 6.0 Metersphere missing permission check 0.7%
• CVE-2023-32699 Medium 6.5 MeterSphere denial of service vulnerability 0.6%
• CVE-2023-30550 Medium 6.8 IDOR vulnerability exists in metersphere 0.7%
• CVE-2023-25814 High 7.1 Arbitrary File Read Vulnerability in metersphere 0.9%
• CVE-2023-25573 High 8.6 Improper access control to download file in metersphere 51.6%
• CVE-2022-46178 High 7.4 Path Traversal In MeterSpere allows file upload to any path 0.8%
• CVE-2022-23544 High 7.2 Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting 1.7%
• CVE-2022-23512 High 7.7 Metersphere is vulnerable to Path Injection. 0.9%