MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in IssueProxyResourceService::getMdImageByUrl allows an attacker to access internal resources, as well as executing JavaScript code in the context of Metersphere's origin by a victim of a reflected XSS. This vulnerability has been fixed in v2.5.0. There are no known workarounds.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23544.json",
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-79",
"CWE-918"
]
}{
"cpe": "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "2.5.0"
}
]
}[
{
"digest": {
"length": 523.0,
"function_hash": "77110813163076223269964780688231298405"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "setModule",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
},
"id": "CVE-2022-23544-02612adb",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"74597424048713370625982061955848967346",
"80400195144060427157536157625941316421",
"278622059026872862423949847973671196730",
"207952611243737198472671079911154459746",
"233242308441286068455009446401530137776",
"134052033360985293444525097200119615911",
"184909783338548346545477627066241699369",
"137044233178490142685876826653310007100"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
},
"id": "CVE-2022-23544-0dcfd244",
"deprecated": false
},
{
"digest": {
"length": 527.0,
"function_hash": "98269606176672445667308120396951368141"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "setModule",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java"
},
"id": "CVE-2022-23544-0e3400a1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"278272468182809943751333322377069275211",
"71951828196873899677438052542062045222",
"109854239411965260484724541630281256069",
"188044748739389772539548576830603601632",
"285117938107047641169984029204748101350",
"68106147602694076981046808918931154905",
"286022130004298243619121116320605765985",
"321004169980479186743522093082299493071",
"128526766095259019247329231260784935721",
"51807684610725627000622707640022222682",
"171477103814628376872054511891482354837",
"155648858392908921231963377364750132972",
"285367111953035841530880719011431995504",
"312770132383488658777900224255791150077",
"297530262053536731836653544130919081230",
"296760156087575533856935637162120814484",
"207959224194094800927404467344540554956",
"285235313566469073362857561046448328359",
"188598314509144915819602622670650829711",
"111861678087947991637470044719506802735",
"31654687221518050321666463510277839379",
"277274012059332355248683914027770328412",
"117784581313419710675834262524787955640",
"14237687698053701333385236007462657583",
"136239285941366799835269877115450612615",
"237999526066584084813245701537429215239",
"275931143919445627371129738382229836771",
"318187694863020497912169431223102176486"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java"
},
"id": "CVE-2022-23544-12832e60",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"73012844264392230114557029495693704990",
"287579198236347321321056400239521097132",
"287093741814966608887199273827068378098",
"141660376646691758208402541383043988785"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "framework/gateway/src/main/java/io/metersphere/gateway/filter/SessionFilter.java"
},
"id": "CVE-2022-23544-1cdf440a",
"deprecated": false
},
{
"digest": {
"length": 380.0,
"function_hash": "287715581143733191504860747391176947800"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "initModulePathAndId",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
},
"id": "CVE-2022-23544-31f23bd6",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"196795775458630884148250553376607301375",
"312147203205727664970640226657378254793",
"16043571997357815695083760964770872069",
"105218003465449205922932309624875465403",
"183204368507815836150533362546584928314",
"31641505541794726815628678660868750303",
"168335795384697236819621211724252666660",
"239835071221777489275507989008625553788",
"16566738496848476551972956217255000633",
"17317227621677100851641452095500534888",
"98816131018193339976311256868835409742",
"68235600361303531371410668866076308625",
"87890018920384714387809256253739084951",
"5130210932298351971792565190337942945",
"17858445232430469816716363856447037296",
"25738654777131913801369704533088268756",
"288309063321684847810189310694675723435",
"265420056526929638187860268819166167594"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java"
},
"id": "CVE-2022-23544-37630588",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"96753561836076734791035700554422133036",
"337080444097918133808766242162865344290",
"326431668588751926960217192496207824434",
"161492388346946461818706279211832658750"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "framework/sdk-parent/xpack-interface/src/main/java/io/metersphere/xpack/track/issue/IssuesPlatform.java"
},
"id": "CVE-2022-23544-3e68406a",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"104731573689432278739214341050020048203",
"51232660250243406062001540347909724173",
"313037619441586746731258703249351752709",
"15444727491872297616245540636871869157",
"163334462489536197078047422447522643395",
"95802242869091219876474084835630380608",
"182765256290521948546697827662569395983",
"214561125267332133459363948700495816230",
"302758266112706469056577103073898985395",
"182915007330031465772360242326897599018"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/client/ZentaoClient.java"
},
"id": "CVE-2022-23544-47a4b9e1",
"deprecated": false
},
{
"digest": {
"length": 711.0,
"function_hash": "286418042677208434713815213295066598338"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "getDefaultNode",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
},
"id": "CVE-2022-23544-491f4156",
"deprecated": false
},
{
"digest": {
"length": 1111.0,
"function_hash": "287768926049425336504149792348990194915"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "ms2ZentaoDescription",
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
},
"id": "CVE-2022-23544-4adb1b5c",
"deprecated": false
},
{
"digest": {
"length": 408.0,
"function_hash": "216015865289522062832475182931546311249"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "getMdImageByUrl",
"file": "test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java"
},
"id": "CVE-2022-23544-4d85a64f",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"160349206914177042447156744963406420480",
"147731899244851609429641297445128380930",
"83520201094614421543572100521372894336",
"49306493526114162771332189343336842241",
"292790224753109177223202949631377374273",
"80400195144060427157536157625941316421",
"278622059026872862423949847973671196730",
"207952611243737198472671079911154459746"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java"
},
"id": "CVE-2022-23544-54f6c8cd",
"deprecated": false
},
{
"digest": {
"length": 1200.0,
"function_hash": "98301173623096570048903995007173050993"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "list",
"file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
},
"id": "CVE-2022-23544-64a8c4c2",
"deprecated": false
},
{
"digest": {
"length": 991.0,
"function_hash": "261572236257471119016214816356873181875"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "getImageFiles",
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java"
},
"id": "CVE-2022-23544-6e1bc3b6",
"deprecated": false
},
{
"digest": {
"length": 219.0,
"function_hash": "94123660613932161223774646362639224341"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "replaceJiraMdUrlParam",
"file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
},
"id": "CVE-2022-23544-734c455d",
"deprecated": false
},
{
"digest": {
"length": 972.0,
"function_hash": "60039552873452331971343380745113908295"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "initProjectDefaultNode",
"file": "api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java"
},
"id": "CVE-2022-23544-80aa9554",
"deprecated": false
},
{
"digest": {
"length": 665.0,
"function_hash": "271947535934166749995371920115019080428"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "getDefaultNode",
"file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
},
"id": "CVE-2022-23544-8ff330db",
"deprecated": false
},
{
"digest": {
"length": 513.0,
"function_hash": "146414697067060893507172168799528741996"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "getPlatform",
"file": "test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"
},
"id": "CVE-2022-23544-9301aabb",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"280511768823416514089393505066573936081",
"13984514033877791125606084394431450996",
"70405213588916669206100468164880379672",
"246344244076844376596866099332421301501",
"297523488178636858783026468402885025237",
"234100822865688781764003817645912555813",
"115773543563579930641430653061387293003",
"202104348429010904953560398144306771435",
"243818748815016011021108718373416539811",
"267112579749087364914531715508143681298",
"26923977889835446114289969214184151355",
"112208873339597136503820391142031795293",
"302114033514290745619329156368610865523",
"55960976604392221676229483135664261005",
"139771752612901251384154624151330406373",
"6739086392716478819945707660648441924",
"329984029214533482751347685330459030934",
"154272831528505850080863364606551099012",
"222655434796735012648898544800164494386",
"294549523779424271935729592412761925268",
"202408994877015872718836405579956745833",
"153661005636825431566327490000571200477",
"189464945578034910569854540430844479705",
"290732184802515455941607111046886145799",
"65886677039749726357689662446141316482",
"283190725189730201971090623250433995468",
"67230075476631304566704081125879668966",
"200609033651997209062467299514045908398",
"179527679123774875330012331060806872043",
"302944881530201292558533004870224192541",
"72941395479538537375420246962084132544",
"286233675481951940903622182223269461237",
"56952200270511317368632621610829566170",
"15702499383480135195262928698835394870",
"97310952841822046901281288927205804277",
"310807766349500679027617301078144743658",
"286799705667293676298986209175912483188",
"331906166212789473597818449985055876930"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
},
"id": "CVE-2022-23544-9af94fbd",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"261085846822311363872844980137152811097",
"16593243078159745149112726971474223195",
"108958092191815419838256049022007847398",
"67225851600991466878592480808592030184",
"60581400947250932001631422812821762853",
"130642373384009873117956879206076390833",
"81075515504970747640574286012008402395",
"185702507388332849026350926217943099739",
"305955328308795461942490738592646074544",
"16881580633592024422351799291942648703",
"37047104494433703433724581400805071607",
"309123623265557250369599461459529456523",
"251465060078287026105982948298948721463",
"216346200691770967892170870301048295598",
"71231825995914495893616545862654736071",
"73163048486292904456310636277095043110",
"141514540829183957678012551986674663695",
"121580317427605391217154653776851077471"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
},
"id": "CVE-2022-23544-9c1f7e3f",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"45140661053818958247775477485250786644",
"243866624756393825099038683493653741081",
"142925759390539416279573690960035801164",
"77419600739035750755945410835165217537",
"147314177625976156637838750577718703897",
"277417212941410750305869323398758180113"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java"
},
"id": "CVE-2022-23544-9ee159ce",
"deprecated": false
},
{
"digest": {
"length": 1208.0,
"function_hash": "14377578564671242143900961085847058946"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "packageDescriptionByPathAndName",
"file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
},
"id": "CVE-2022-23544-a7914efd",
"deprecated": false
},
{
"digest": {
"length": 277.0,
"function_hash": "284208171327687232706517640587340042023"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "getFileByUrl",
"file": "test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java"
},
"id": "CVE-2022-23544-a8b8756a",
"deprecated": false
},
{
"digest": {
"length": 795.0,
"function_hash": "225385307528387296242130851522297046422"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "dealNoModuleData",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
},
"id": "CVE-2022-23544-aaba8054",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"222402245280061330549680870607294530648",
"289905560871697662223757333859920415779",
"14697526473666000140589549997944726492",
"73574124535547208894988364970296253304",
"130256283396663707654054987661602520904",
"283572282235852078276460843037083440814",
"11787278805150716069723747626187018089",
"162455559552731330176622156363568235560",
"22334077816143116663024594343412594434",
"162409620187044018576377379503905216661",
"1904111412676151990019924987917519629",
"84419609645501210644937049552870091627",
"63296024205187108156770491452396890423",
"44492560274996084871354966357247984570",
"133687684314275171149227784140768899922",
"206694450888054013572414858682923712916",
"88865677176790709623725683808409630349",
"213277545811320506350251463241188094543",
"76721161450330510765858970780009557280",
"255600682972385627679119381564779050303",
"33480585626503338337804887948539695835",
"208483972291520012362829766014268808919",
"320565492165136201373036846535823752023",
"30560426698047264364963978333526377504",
"328288338623221814023423111591575337089",
"49456992866032981313676056898895697448",
"112443548835750928086002410831212975247",
"146379125709788091207893920993824078723",
"338680659165998798152565070391246697463",
"19332488788603264423893229343962058960",
"87019283793657214396701480466943451094",
"111038702318403948577527526321905413768",
"181551219314061894997174876275640849421",
"152956198677936677111463997527807624204",
"131396123333700819024460749752766213990",
"256633187406756402541362931432963364337",
"44191306562617299947037894428948444167",
"232291103753518685912873093130090706978",
"147628775333940412816651555575556289697",
"254284674686714701547950944239443087315",
"89750096744968656616023281010179320550",
"133832090419468890161169384692281759125",
"32501426815323623391475178770318058182",
"115845754318846903185965075583507396906",
"65414875540611463333232018403977619800",
"107252165025512687200143143596923464134",
"17042532732903691147791953338021772940",
"259897803813904807490497777652547918945",
"157437110658841877599176896649188723259",
"241105582635798524795650021092889281440",
"121479058264151672128525139161153095309",
"89750096744968656616023281010179320550",
"337160560467578645371214691278507315493",
"137445605693246550866675101508666130184",
"191799228766914010097852586339967055858",
"297511574642409794879342500495757207989",
"143704291393499768911068873538795330801",
"66923118750981902695604767647874258640",
"174305686370370409679882866282061221249",
"150128791857864762550534135399874981835",
"269824057648858177940089312835984819129",
"3381565200042349207611069717622562816",
"142265392778320648391344527611290586503",
"149109118628706427135807011014240297570",
"269824057648858177940089312835984819129",
"3381565200042349207611069717622562816",
"285148124486106241898975564675612134952",
"68218744864252736535147448789814623622",
"259320049084666124223471547544191929224",
"125286532665786734105881151303911369831",
"319722149849100146494219771675391600998",
"270428413605264327252290726825264111257",
"171501788649617725180327382162670827138",
"235987852783806009928765153318943342996",
"101032147783327701835657975289322369493",
"232553452740850048356812062587252073069",
"243726132121131647514840703027916761567",
"93588731297456292418906019284691873701",
"183817461140099373508121398513184303650",
"328982402551109193508074573056072144396"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
},
"id": "CVE-2022-23544-b4d94bab",
"deprecated": false
},
{
"digest": {
"length": 1416.0,
"function_hash": "327090266812510986042514661424777104586"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "setModule",
"file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
},
"id": "CVE-2022-23544-b633de0e",
"deprecated": false
},
{
"digest": {
"length": 358.0,
"function_hash": "130441342339627305960364211417201069251"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "replenishScenarioModuleIdPath",
"file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java"
},
"id": "CVE-2022-23544-baa9585c",
"deprecated": false
},
{
"digest": {
"length": 964.0,
"function_hash": "317635486761256101590532433116959348495"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Function",
"target": {
"function": "handleJiraIssueMdUrl",
"file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
},
"id": "CVE-2022-23544-bea1262f",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"121091239688263335219630949546794071736",
"163107326363096523125664167948664905988",
"197327421144043305959840517951555602998",
"123280177621905834499572829627684326787"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java"
},
"id": "CVE-2022-23544-cf84b383",
"deprecated": false
},
{
"digest": {
"length": 325.0,
"function_hash": "139422468988274053594253252339311135088"
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Function",
"target": {
"function": "getDefaultNodeUnCreateNew",
"file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
},
"id": "CVE-2022-23544-efac217e",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"29157381437871380938878930372372325541",
"181303917191981290187068398184840396308",
"281764158105859630175977404387493073011",
"304285694422565054913608007266982689885",
"278730375576495053258462166750322686463",
"36759592528653042853637481198353335556",
"115175280774467255361303673002061491529",
"252953681829500709626842993287806127487",
"121120130622466068829265828949506869148",
"221522663221509936711841130292622737076",
"1273695540759509653905855891763572833",
"269932115789218713762933126026896629876",
"79165981814158609230338484195989604558",
"311575270029738126941768558071735731970",
"223261684746928011210437901490929508550",
"74990744622745911569453630610629580546",
"138757364690304626285434878973442139176",
"201936417802517596632722503221868353309",
"210426139174828880467897380254928789612",
"173530249456698254868992558462139500732",
"39643933930835277707516807712449459741"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
"signature_type": "Line",
"target": {
"file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
},
"id": "CVE-2022-23544-f6b1b83a",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"193914868186326583689439550745463868932",
"203741725656487241878460312271458892896",
"143878349011649714259848876680508772326",
"8613616418781143768214645815809571942",
"279660435419233574615848328316083003550",
"79998254825375923600877757833055632648",
"136891166673294162300678283028953351291",
"144161633599534820057758601608335261997",
"13240015967030837025139651391657499496",
"83656030195338160315975235643309769773",
"123995859995920872217168398077549654061",
"53662536543994859797652218663119491025",
"123656898780226417789204351179493474680",
"278469691488865729975517106200238114547",
"41466863327417758846350400986578485147",
"267148434200623980592800079072089886900",
"224795161448405645610964293660417220983"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java"
},
"id": "CVE-2022-23544-f9fc1aa3",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"306241700120245737341023030112955945471",
"45622321982235277891883036960615826857",
"66095479715111338992189649457160390198",
"197397760568196978982969565488629949164"
]
},
"signature_version": "v1",
"source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
"signature_type": "Line",
"target": {
"file": "test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"
},
"id": "CVE-2022-23544-fc9a2388",
"deprecated": false
}
]
"2026-07-22T02:24:00Z"
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23544.json"