<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: metersphere</title><description>Every new CVE for metersphere.</description><link>https://agentprime.io/</link><item><title>CVE-2025-62604: MeterSphere logic flaw allows retrieval of arbitrary user information</title><link>https://agentprime.io/advisories/CVE-2025-62604/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62604/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Oct 2025 15:03:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53639: Metersphere has SQL Injection Vulnerability in Sorting Field</title><link>https://agentprime.io/advisories/CVE-2025-53639/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53639/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Jul 2025 20:04:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37161: MeterSphere front-end editor stores XSS vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-37161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37161/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Jun 2024 14:07:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36118: Unauthorized viewing of workspace test cases in MeterSphere</title><link>https://agentprime.io/advisories/CVE-2024-36118/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36118/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 May 2024 16:51:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-32467: Meteraphsere vulnerable to unauthorized viewing by workspace members</title><link>https://agentprime.io/advisories/CVE-2024-32467/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-32467/</guid><description>CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Apr 2024 16:56:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-50267: MeterSphere horizontal privilege escalation vulnerability of resources in project scope.</title><link>https://agentprime.io/advisories/CVE-2023-50267/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50267/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 Dec 2023 15:13:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-41878: Weak password of selenium VNC in MeterSphere</title><link>https://agentprime.io/advisories/CVE-2023-41878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-41878/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Sep 2023 22:53:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-38494: The cloud version of the MeterSphere interface leaks some sensitive data without authentication</title><link>https://agentprime.io/advisories/CVE-2023-38494/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-38494/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Aug 2023 15:44:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-37461: Path traversal in metersphere</title><link>https://agentprime.io/advisories/CVE-2023-37461/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-37461/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 17 Jul 2023 19:51:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-35937: Metersphere missing permission check</title><link>https://agentprime.io/advisories/CVE-2023-35937/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-35937/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Jul 2023 13:50:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32699: MeterSphere denial of service vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-32699/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32699/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 May 2023 18:59:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-30550: IDOR vulnerability exists in metersphere</title><link>https://agentprime.io/advisories/CVE-2023-30550/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-30550/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 May 2023 17:26:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-25814: Arbitrary File Read Vulnerability in metersphere</title><link>https://agentprime.io/advisories/CVE-2023-25814/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-25814/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Mar 2023 17:10:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-25573: Improper access control to download file in metersphere</title><link>https://agentprime.io/advisories/CVE-2023-25573/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-25573/</guid><description>CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.52 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Mar 2023 16:33:40 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-23544: Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2022-23544/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23544/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Dec 2022 23:57:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-23512: Metersphere is vulnerable to Path Injection.</title><link>https://agentprime.io/advisories/CVE-2022-23512/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-23512/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Dec 2022 13:09:36 GMT</pubDate><category>CVE</category></item></channel></rss>