CVE-2023-30550CWE-639

IDOR vulnerability exists in metersphere

Medium · published May 4, 2023

CVSS v3.1
6.8
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some operating permissions. The issue has been fixed in version 2.9.0.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2023-05-04T17:26Z
EPSS history
Timeline
  • 04 MAY 17:26Z
    IDOR vulnerability exists in metersphere
    cvelistv5