metersphere vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20239
3. 20243
4. 20252

Newest CVEs

• CVE-2025-62604

  MeterSphere logic flaw allows retrieval of arbitrary user information

  metersphere · metersphere

  Medium5.3
• CVE-2025-53639

  Metersphere has SQL Injection Vulnerability in Sorting Field

  metersphere · metersphere

  Medium5.1
• CVE-2024-37161

  MeterSphere front-end editor stores XSS vulnerability

  metersphere · metersphere

  Medium4.0
• CVE-2024-36118

  Unauthorized viewing of workspace test cases in MeterSphere

  metersphere · metersphere

  Low3.5
• CVE-2024-32467

  Meteraphsere vulnerable to unauthorized viewing by workspace members

  metersphere · metersphere

  Medium5.7
• CVE-2023-50267

  MeterSphere horizontal privilege escalation vulnerability of resources in project scope.

  metersphere · metersphere

  Medium4.3
• CVE-2023-41878

  Weak password of selenium VNC in MeterSphere

  metersphere · metersphere

  Medium4.6
• CVE-2023-38494

  The cloud version of the MeterSphere interface leaks some sensitive data without authentication

  metersphere · metersphere

  Medium5.9
• CVE-2023-37461

  Path traversal in metersphere

  metersphere · metersphere

  Medium5.6
• CVE-2023-35937

  Metersphere missing permission check

  metersphere · metersphere

  Medium6.0