CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function

published December 27, 2021

CVSS
—
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00921 · 59.9th percentile
Published
2021-12-27T11:51Z
EPSS history
Timeline
  • 27 DEC 11:51Z
    An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function
    cvelistv5