CVE-2022-23512
High
Description
MeterSphere is a one-stop open source continuous testing platform. Versions prior to 2.4.1 are vulnerable to Path Injection in ApiTestCaseService::deleteBodyFiles which takes a user-controlled string id and passes it to ApiTestCaseService, which uses the user-provided value (testId) in new File(BODY_FILE_DIR + "/" + testId), being deleted later by file.delete(). By adding some camouflage parameters to the url, an attacker can target files on the server. The vulnerability has been fixed in v2.4.1.
SeverityHigh
CVSS7.7
Exploit probability—
ProductMetersphere
PublishedDec 14, 2022
First seenDec 14, 2022
Weakness typeCWE-22Path traversal
How to fix
Update
- metersphere metersphere2.4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metersphere metersphere | v < 2.4.1 | 2.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.