CVE-2024-32467

MEDIUM

Meteraphsere vulnerable to unauthorized viewing by workspace members

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-32467 has a selected CVSS score of 5.7 (medium).

Description

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 25, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

metersphere

Browse metersphere / metersphere

Default status: unknown

CVE List- to < 2.10.14affected
< 2.10.14-ltsaffected

References

1