CVE-2023-50267
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
Summary
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
Original description
The description as published by the source.
MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov