CVE-2023-50267
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
Résumé
MeterSphere horizontal privilege escalation vulnerability of resources in project scope.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov