CVE-2023-50267
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
概要
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov