| Package | Affected versions | Patched versions |
|---|---|---|
| metersphere | < 2.10.25 | 2.10.25 |
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free