Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2024-32467

Meteraphsere vulnerable to unauthorized viewing by workspace members

Description

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

metersphere metersphere

  • < 2.10.14-ltsaffected

References