CVE-2022-23544

Source
https://cve.org/CVERecord?id=CVE-2022-23544
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23544.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-23544
Aliases
  • GHSA-vrv6-cg45-rmjj
Published
2022-12-27T23:57:42.208Z
Modified
2026-07-22T02:24:00.451710Z
Severity
  • 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting
Details

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in IssueProxyResourceService::getMdImageByUrl allows an attacker to access internal resources, as well as executing JavaScript code in the context of Metersphere's origin by a victim of a reflected XSS. This vulnerability has been fixed in v2.5.0. There are no known workarounds.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23544.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-79",
        "CWE-918"
    ]
}
References

Affected packages

Git / github.com/metersphere/metersphere

Affected ranges

Type
GIT
Repo
https://github.com/metersphere/metersphere
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed
Database specific
{
    "cpe": "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.5.0"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.2.0

Database specific

vanir_signatures
[
    {
        "digest": {
            "length": 523.0,
            "function_hash": "77110813163076223269964780688231298405"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "setModule",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
        },
        "id": "CVE-2022-23544-02612adb",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "74597424048713370625982061955848967346",
                "80400195144060427157536157625941316421",
                "278622059026872862423949847973671196730",
                "207952611243737198472671079911154459746",
                "233242308441286068455009446401530137776",
                "134052033360985293444525097200119615911",
                "184909783338548346545477627066241699369",
                "137044233178490142685876826653310007100"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
        },
        "id": "CVE-2022-23544-0dcfd244",
        "deprecated": false
    },
    {
        "digest": {
            "length": 527.0,
            "function_hash": "98269606176672445667308120396951368141"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "setModule",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java"
        },
        "id": "CVE-2022-23544-0e3400a1",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "278272468182809943751333322377069275211",
                "71951828196873899677438052542062045222",
                "109854239411965260484724541630281256069",
                "188044748739389772539548576830603601632",
                "285117938107047641169984029204748101350",
                "68106147602694076981046808918931154905",
                "286022130004298243619121116320605765985",
                "321004169980479186743522093082299493071",
                "128526766095259019247329231260784935721",
                "51807684610725627000622707640022222682",
                "171477103814628376872054511891482354837",
                "155648858392908921231963377364750132972",
                "285367111953035841530880719011431995504",
                "312770132383488658777900224255791150077",
                "297530262053536731836653544130919081230",
                "296760156087575533856935637162120814484",
                "207959224194094800927404467344540554956",
                "285235313566469073362857561046448328359",
                "188598314509144915819602622670650829711",
                "111861678087947991637470044719506802735",
                "31654687221518050321666463510277839379",
                "277274012059332355248683914027770328412",
                "117784581313419710675834262524787955640",
                "14237687698053701333385236007462657583",
                "136239285941366799835269877115450612615",
                "237999526066584084813245701537429215239",
                "275931143919445627371129738382229836771",
                "318187694863020497912169431223102176486"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java"
        },
        "id": "CVE-2022-23544-12832e60",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "73012844264392230114557029495693704990",
                "287579198236347321321056400239521097132",
                "287093741814966608887199273827068378098",
                "141660376646691758208402541383043988785"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "framework/gateway/src/main/java/io/metersphere/gateway/filter/SessionFilter.java"
        },
        "id": "CVE-2022-23544-1cdf440a",
        "deprecated": false
    },
    {
        "digest": {
            "length": 380.0,
            "function_hash": "287715581143733191504860747391176947800"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "initModulePathAndId",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"
        },
        "id": "CVE-2022-23544-31f23bd6",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "196795775458630884148250553376607301375",
                "312147203205727664970640226657378254793",
                "16043571997357815695083760964770872069",
                "105218003465449205922932309624875465403",
                "183204368507815836150533362546584928314",
                "31641505541794726815628678660868750303",
                "168335795384697236819621211724252666660",
                "239835071221777489275507989008625553788",
                "16566738496848476551972956217255000633",
                "17317227621677100851641452095500534888",
                "98816131018193339976311256868835409742",
                "68235600361303531371410668866076308625",
                "87890018920384714387809256253739084951",
                "5130210932298351971792565190337942945",
                "17858445232430469816716363856447037296",
                "25738654777131913801369704533088268756",
                "288309063321684847810189310694675723435",
                "265420056526929638187860268819166167594"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java"
        },
        "id": "CVE-2022-23544-37630588",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "96753561836076734791035700554422133036",
                "337080444097918133808766242162865344290",
                "326431668588751926960217192496207824434",
                "161492388346946461818706279211832658750"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "framework/sdk-parent/xpack-interface/src/main/java/io/metersphere/xpack/track/issue/IssuesPlatform.java"
        },
        "id": "CVE-2022-23544-3e68406a",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "104731573689432278739214341050020048203",
                "51232660250243406062001540347909724173",
                "313037619441586746731258703249351752709",
                "15444727491872297616245540636871869157",
                "163334462489536197078047422447522643395",
                "95802242869091219876474084835630380608",
                "182765256290521948546697827662569395983",
                "214561125267332133459363948700495816230",
                "302758266112706469056577103073898985395",
                "182915007330031465772360242326897599018"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/client/ZentaoClient.java"
        },
        "id": "CVE-2022-23544-47a4b9e1",
        "deprecated": false
    },
    {
        "digest": {
            "length": 711.0,
            "function_hash": "286418042677208434713815213295066598338"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "getDefaultNode",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
        },
        "id": "CVE-2022-23544-491f4156",
        "deprecated": false
    },
    {
        "digest": {
            "length": 1111.0,
            "function_hash": "287768926049425336504149792348990194915"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "ms2ZentaoDescription",
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
        },
        "id": "CVE-2022-23544-4adb1b5c",
        "deprecated": false
    },
    {
        "digest": {
            "length": 408.0,
            "function_hash": "216015865289522062832475182931546311249"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "getMdImageByUrl",
            "file": "test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java"
        },
        "id": "CVE-2022-23544-4d85a64f",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160349206914177042447156744963406420480",
                "147731899244851609429641297445128380930",
                "83520201094614421543572100521372894336",
                "49306493526114162771332189343336842241",
                "292790224753109177223202949631377374273",
                "80400195144060427157536157625941316421",
                "278622059026872862423949847973671196730",
                "207952611243737198472671079911154459746"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java"
        },
        "id": "CVE-2022-23544-54f6c8cd",
        "deprecated": false
    },
    {
        "digest": {
            "length": 1200.0,
            "function_hash": "98301173623096570048903995007173050993"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "list",
            "file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
        },
        "id": "CVE-2022-23544-64a8c4c2",
        "deprecated": false
    },
    {
        "digest": {
            "length": 991.0,
            "function_hash": "261572236257471119016214816356873181875"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "getImageFiles",
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java"
        },
        "id": "CVE-2022-23544-6e1bc3b6",
        "deprecated": false
    },
    {
        "digest": {
            "length": 219.0,
            "function_hash": "94123660613932161223774646362639224341"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "replaceJiraMdUrlParam",
            "file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
        },
        "id": "CVE-2022-23544-734c455d",
        "deprecated": false
    },
    {
        "digest": {
            "length": 972.0,
            "function_hash": "60039552873452331971343380745113908295"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "initProjectDefaultNode",
            "file": "api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java"
        },
        "id": "CVE-2022-23544-80aa9554",
        "deprecated": false
    },
    {
        "digest": {
            "length": 665.0,
            "function_hash": "271947535934166749995371920115019080428"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "getDefaultNode",
            "file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
        },
        "id": "CVE-2022-23544-8ff330db",
        "deprecated": false
    },
    {
        "digest": {
            "length": 513.0,
            "function_hash": "146414697067060893507172168799528741996"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "getPlatform",
            "file": "test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"
        },
        "id": "CVE-2022-23544-9301aabb",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "280511768823416514089393505066573936081",
                "13984514033877791125606084394431450996",
                "70405213588916669206100468164880379672",
                "246344244076844376596866099332421301501",
                "297523488178636858783026468402885025237",
                "234100822865688781764003817645912555813",
                "115773543563579930641430653061387293003",
                "202104348429010904953560398144306771435",
                "243818748815016011021108718373416539811",
                "267112579749087364914531715508143681298",
                "26923977889835446114289969214184151355",
                "112208873339597136503820391142031795293",
                "302114033514290745619329156368610865523",
                "55960976604392221676229483135664261005",
                "139771752612901251384154624151330406373",
                "6739086392716478819945707660648441924",
                "329984029214533482751347685330459030934",
                "154272831528505850080863364606551099012",
                "222655434796735012648898544800164494386",
                "294549523779424271935729592412761925268",
                "202408994877015872718836405579956745833",
                "153661005636825431566327490000571200477",
                "189464945578034910569854540430844479705",
                "290732184802515455941607111046886145799",
                "65886677039749726357689662446141316482",
                "283190725189730201971090623250433995468",
                "67230075476631304566704081125879668966",
                "200609033651997209062467299514045908398",
                "179527679123774875330012331060806872043",
                "302944881530201292558533004870224192541",
                "72941395479538537375420246962084132544",
                "286233675481951940903622182223269461237",
                "56952200270511317368632621610829566170",
                "15702499383480135195262928698835394870",
                "97310952841822046901281288927205804277",
                "310807766349500679027617301078144743658",
                "286799705667293676298986209175912483188",
                "331906166212789473597818449985055876930"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
        },
        "id": "CVE-2022-23544-9af94fbd",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "261085846822311363872844980137152811097",
                "16593243078159745149112726971474223195",
                "108958092191815419838256049022007847398",
                "67225851600991466878592480808592030184",
                "60581400947250932001631422812821762853",
                "130642373384009873117956879206076390833",
                "81075515504970747640574286012008402395",
                "185702507388332849026350926217943099739",
                "305955328308795461942490738592646074544",
                "16881580633592024422351799291942648703",
                "37047104494433703433724581400805071607",
                "309123623265557250369599461459529456523",
                "251465060078287026105982948298948721463",
                "216346200691770967892170870301048295598",
                "71231825995914495893616545862654736071",
                "73163048486292904456310636277095043110",
                "141514540829183957678012551986674663695",
                "121580317427605391217154653776851077471"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
        },
        "id": "CVE-2022-23544-9c1f7e3f",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "45140661053818958247775477485250786644",
                "243866624756393825099038683493653741081",
                "142925759390539416279573690960035801164",
                "77419600739035750755945410835165217537",
                "147314177625976156637838750577718703897",
                "277417212941410750305869323398758180113"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java"
        },
        "id": "CVE-2022-23544-9ee159ce",
        "deprecated": false
    },
    {
        "digest": {
            "length": 1208.0,
            "function_hash": "14377578564671242143900961085847058946"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "packageDescriptionByPathAndName",
            "file": "test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"
        },
        "id": "CVE-2022-23544-a7914efd",
        "deprecated": false
    },
    {
        "digest": {
            "length": 277.0,
            "function_hash": "284208171327687232706517640587340042023"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "getFileByUrl",
            "file": "test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java"
        },
        "id": "CVE-2022-23544-a8b8756a",
        "deprecated": false
    },
    {
        "digest": {
            "length": 795.0,
            "function_hash": "225385307528387296242130851522297046422"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "dealNoModuleData",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
        },
        "id": "CVE-2022-23544-aaba8054",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "222402245280061330549680870607294530648",
                "289905560871697662223757333859920415779",
                "14697526473666000140589549997944726492",
                "73574124535547208894988364970296253304",
                "130256283396663707654054987661602520904",
                "283572282235852078276460843037083440814",
                "11787278805150716069723747626187018089",
                "162455559552731330176622156363568235560",
                "22334077816143116663024594343412594434",
                "162409620187044018576377379503905216661",
                "1904111412676151990019924987917519629",
                "84419609645501210644937049552870091627",
                "63296024205187108156770491452396890423",
                "44492560274996084871354966357247984570",
                "133687684314275171149227784140768899922",
                "206694450888054013572414858682923712916",
                "88865677176790709623725683808409630349",
                "213277545811320506350251463241188094543",
                "76721161450330510765858970780009557280",
                "255600682972385627679119381564779050303",
                "33480585626503338337804887948539695835",
                "208483972291520012362829766014268808919",
                "320565492165136201373036846535823752023",
                "30560426698047264364963978333526377504",
                "328288338623221814023423111591575337089",
                "49456992866032981313676056898895697448",
                "112443548835750928086002410831212975247",
                "146379125709788091207893920993824078723",
                "338680659165998798152565070391246697463",
                "19332488788603264423893229343962058960",
                "87019283793657214396701480466943451094",
                "111038702318403948577527526321905413768",
                "181551219314061894997174876275640849421",
                "152956198677936677111463997527807624204",
                "131396123333700819024460749752766213990",
                "256633187406756402541362931432963364337",
                "44191306562617299947037894428948444167",
                "232291103753518685912873093130090706978",
                "147628775333940412816651555575556289697",
                "254284674686714701547950944239443087315",
                "89750096744968656616023281010179320550",
                "133832090419468890161169384692281759125",
                "32501426815323623391475178770318058182",
                "115845754318846903185965075583507396906",
                "65414875540611463333232018403977619800",
                "107252165025512687200143143596923464134",
                "17042532732903691147791953338021772940",
                "259897803813904807490497777652547918945",
                "157437110658841877599176896649188723259",
                "241105582635798524795650021092889281440",
                "121479058264151672128525139161153095309",
                "89750096744968656616023281010179320550",
                "337160560467578645371214691278507315493",
                "137445605693246550866675101508666130184",
                "191799228766914010097852586339967055858",
                "297511574642409794879342500495757207989",
                "143704291393499768911068873538795330801",
                "66923118750981902695604767647874258640",
                "174305686370370409679882866282061221249",
                "150128791857864762550534135399874981835",
                "269824057648858177940089312835984819129",
                "3381565200042349207611069717622562816",
                "142265392778320648391344527611290586503",
                "149109118628706427135807011014240297570",
                "269824057648858177940089312835984819129",
                "3381565200042349207611069717622562816",
                "285148124486106241898975564675612134952",
                "68218744864252736535147448789814623622",
                "259320049084666124223471547544191929224",
                "125286532665786734105881151303911369831",
                "319722149849100146494219771675391600998",
                "270428413605264327252290726825264111257",
                "171501788649617725180327382162670827138",
                "235987852783806009928765153318943342996",
                "101032147783327701835657975289322369493",
                "232553452740850048356812062587252073069",
                "243726132121131647514840703027916761567",
                "93588731297456292418906019284691873701",
                "183817461140099373508121398513184303650",
                "328982402551109193508074573056072144396"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
        },
        "id": "CVE-2022-23544-b4d94bab",
        "deprecated": false
    },
    {
        "digest": {
            "length": 1416.0,
            "function_hash": "327090266812510986042514661424777104586"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "setModule",
            "file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
        },
        "id": "CVE-2022-23544-b633de0e",
        "deprecated": false
    },
    {
        "digest": {
            "length": 358.0,
            "function_hash": "130441342339627305960364211417201069251"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "replenishScenarioModuleIdPath",
            "file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java"
        },
        "id": "CVE-2022-23544-baa9585c",
        "deprecated": false
    },
    {
        "digest": {
            "length": 964.0,
            "function_hash": "317635486761256101590532433116959348495"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Function",
        "target": {
            "function": "handleJiraIssueMdUrl",
            "file": "test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"
        },
        "id": "CVE-2022-23544-bea1262f",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "121091239688263335219630949546794071736",
                "163107326363096523125664167948664905988",
                "197327421144043305959840517951555602998",
                "123280177621905834499572829627684326787"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java"
        },
        "id": "CVE-2022-23544-cf84b383",
        "deprecated": false
    },
    {
        "digest": {
            "length": 325.0,
            "function_hash": "139422468988274053594253252339311135088"
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Function",
        "target": {
            "function": "getDefaultNodeUnCreateNew",
            "file": "api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"
        },
        "id": "CVE-2022-23544-efac217e",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "29157381437871380938878930372372325541",
                "181303917191981290187068398184840396308",
                "281764158105859630175977404387493073011",
                "304285694422565054913608007266982689885",
                "278730375576495053258462166750322686463",
                "36759592528653042853637481198353335556",
                "115175280774467255361303673002061491529",
                "252953681829500709626842993287806127487",
                "121120130622466068829265828949506869148",
                "221522663221509936711841130292622737076",
                "1273695540759509653905855891763572833",
                "269932115789218713762933126026896629876",
                "79165981814158609230338484195989604558",
                "311575270029738126941768558071735731970",
                "223261684746928011210437901490929508550",
                "74990744622745911569453630610629580546",
                "138757364690304626285434878973442139176",
                "201936417802517596632722503221868353309",
                "210426139174828880467897380254928789612",
                "173530249456698254868992558462139500732",
                "39643933930835277707516807712449459741"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c",
        "signature_type": "Line",
        "target": {
            "file": "api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"
        },
        "id": "CVE-2022-23544-f6b1b83a",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "193914868186326583689439550745463868932",
                "203741725656487241878460312271458892896",
                "143878349011649714259848876680508772326",
                "8613616418781143768214645815809571942",
                "279660435419233574615848328316083003550",
                "79998254825375923600877757833055632648",
                "136891166673294162300678283028953351291",
                "144161633599534820057758601608335261997",
                "13240015967030837025139651391657499496",
                "83656030195338160315975235643309769773",
                "123995859995920872217168398077549654061",
                "53662536543994859797652218663119491025",
                "123656898780226417789204351179493474680",
                "278469691488865729975517106200238114547",
                "41466863327417758846350400986578485147",
                "267148434200623980592800079072089886900",
                "224795161448405645610964293660417220983"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java"
        },
        "id": "CVE-2022-23544-f9fc1aa3",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "306241700120245737341023030112955945471",
                "45622321982235277891883036960615826857",
                "66095479715111338992189649457160390198",
                "197397760568196978982969565488629949164"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121",
        "signature_type": "Line",
        "target": {
            "file": "test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"
        },
        "id": "CVE-2022-23544-fc9a2388",
        "deprecated": false
    }
]
vanir_signatures_modified
"2026-07-22T02:24:00Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23544.json"