Advisories · Technology

metersphere.

Every CVE that names metersphere among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-62604 CVE record

CVSS 5.3 Medium

MeterSphere logic flaw allows retrieval of arbitrary user information
- metersphere
- Information disclosure
Not analysed yet 22 Oct 2025
CVE-2025-53639 CVE record

CVSS 5.1 Medium

Metersphere has SQL Injection Vulnerability in Sorting Field
- metersphere
- SQL injection
Not analysed yet 14 Jul 2025
CVE-2024-37161 CVE record

CVSS 4.0 Medium

MeterSphere front-end editor stores XSS vulnerability
- metersphere
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2024
CVE-2024-36118 CVE record

CVSS 3.5 Low

Unauthorized viewing of workspace test cases in MeterSphere
- metersphere
- Information disclosure
Not analysed yet 30 May 2024
CVE-2024-32467 CVE record

CVSS 5.7 Medium

Meteraphsere vulnerable to unauthorized viewing by workspace members
- metersphere
- Information disclosure
Not analysed yet 25 Apr 2024
CVE-2023-50267 CVE record

CVSS 4.3 Medium

MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
- metersphere
- Privilege escalation
- Broken access control
Not analysed yet 28 Dec 2023
CVE-2023-41878 CVE record

CVSS 4.6 Medium

Weak password of selenium VNC in MeterSphere
- metersphere
- Hard-coded credentials
Not analysed yet 26 Sept 2023
CVE-2023-38494 CVE record

CVSS 5.9 Medium

The cloud version of the MeterSphere interface leaks some sensitive data without authentication
- metersphere
- Information disclosure
Not analysed yet 4 Aug 2023
CVE-2023-37461 CVE record

CVSS 5.6 Medium

Path traversal in metersphere
- metersphere
- Path traversal
Not analysed yet 17 Jul 2023
CVE-2023-35937 CVE record

CVSS 6.0 Medium

Metersphere missing permission check
- metersphere
- Broken access control
Not analysed yet 6 Jul 2023
CVE-2023-32699 CVE record

CVSS 6.5 Medium

MeterSphere denial of service vulnerability
- metersphere
- Denial of service
Not analysed yet 30 May 2023
CVE-2023-30550 CVE record

CVSS 6.8 Medium

IDOR vulnerability exists in metersphere
- metersphere
- Broken access control
Not analysed yet 4 May 2023
CVE-2023-25814 CVE record

CVSS 7.1 High

Arbitrary File Read Vulnerability in metersphere
- metersphere
- Path traversal
Not analysed yet 9 Mar 2023
CVE-2023-25573 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Improper access control to download file in metersphere
- metersphere
- Broken access control
Not analysed yet 9 Mar 2023
CVE-2022-23544 CVE record

CVSS 7.2 High

Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting
- metersphere
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
Not analysed yet 27 Dec 2022
CVE-2022-23512 CVE record

CVSS 7.7 High

Metersphere is vulnerable to Path Injection.
- metersphere
- Path traversal
Not analysed yet 14 Dec 2022