CVE-2023-50267

MEDIUM

MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-50267 has a selected CVSS score of 4.3 (medium).

Description

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 4, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

metersphere

Browse metersphere / metersphere
CVE List< 2.10.10-ltsaffected

References

1