VULNERABILITY INTELLIGENCE

CVE-2023-38494

CVSS score5.9 MEDIUM

EPSS probability0.47%

CISA KEVNot currently listed

Published2023-08-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H

Description

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively leaked by attackers. Version 2.10.4 LTS contains a patch for this issue.

Weakness classification

security-advisories@github.com: CWE-200
nvd@nist.gov: CWE-862

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory