CVE-2024-36118CWE-200

Unauthorized viewing of workspace test cases in MeterSphere

Low · published May 30, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

MeterSphere is a test management and interface testing tool. In affected versions users without workspace permissions can view functional test cases of other workspaces beyond their authority. This issue has been addressed in version 2.10.15-lts. Users of MeterSphere are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00296 · 21.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-05-30T16:51Z
EPSS history
Timeline
  • 30 MAY 16:51Z
    Unauthorized viewing of workspace test cases in MeterSphere
    cvelistv5