| Package | Affected versions | Patched versions |
|---|---|---|
| metersphere | = 1.15.4 |
An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free