CVE-2025-62604
MeterSphere logic flaw allows retrieval of arbitrary user information
Résumé
MeterSphere logic flaw allows retrieval of arbitrary user information
Description d'origine
La description telle que publiée par la source (souvent en anglais).
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com