1. Home
  2. CVE Database
  3. CVE-2023-38494
MEDIUM · 5.9

CVE-2023-38494

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively l...

Vulnerability Description

MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively leaked by attackers. Version 2.10.4 LTS contains a patch for this issue.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
MetersphereMetersphere< 2.10.4

Related Weaknesses (CWE)

CWE-200CWE-862

References

FAQ

What is CVE-2023-38494?

CVE-2023-38494 is a vulnerability with a CVSS score of 5.9 (MEDIUM). MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively l...

How severe is CVE-2023-38494?

CVE-2023-38494 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-38494?

Check the references section above for vendor advisories and patch information. Affected products include: Metersphere Metersphere.