CVE-2022-23512

HIGH

MeterSphere < 2.4.1 - Path Traversal via ApiTestCaseService

Title source: llm

Description

MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value (testId) in new File(BODY_FILE_DIR + "/" + testId), being deleted later by file.delete(). By adding some camouflage parameters to the url, an attacker can target files on the server. The vulnerability has been fixed in v2.4.1.

References (1)

Core 1

Core References

Exploit, Patch, Third Party Advisory x_refsource_confirm

https://github.com/metersphere/metersphere/security/advisories/GHSA-5mwp-xw7p-5j27

Scores

CVSS v3 7.7

EPSS 0.0083

EPSS Percentile 52.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (1)

metersphere/metersphere < 2.4.1

Published Dec 14, 2022

Tracked Since Feb 18, 2026