cve.bz

CVE-2023-38494

7.5 highEPSS 0.5%

High (7.5) in metersphere metersphere. EPSS 0.5% chance of exploitation in the next 30 days.

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively leaked by attackers. Version 2.10.4 LTS contains a patch for this issue.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs
CWE-862, CWE-200
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON