← CVE Intelligence

CVE-2024-32467

Meteraphsere vulnerable to unauthorized viewing by workspace members PUBLISHED

Description (CNA)

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue.

Affected (CNA)

Vendor / productVersions
metersphere / metersphereaffected < 2.10.14-lts

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.