CVE-2023-30550

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-30550

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-30550.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-30550

Aliases

GHSA-j5cq-cpw2-gp2q

Published

2023-05-04T17:26:13.218Z

Modified

2026-07-15T01:49:04.166653950Z

Severity

6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

IDOR vulnerability exists in metersphere

Details

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some operating permissions. The issue has been fixed in version 2.9.0.

Database specific

{
    "cwe_ids": [
        "CWE-639"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30550.json"
}

References

Affected packages

Git / github.com/metersphere/metersphere

Affected ranges

Type

GIT

Repo

https://github.com/metersphere/metersphere

Events

Introduced

Fixed

426de152a9b1830558183ccaf1c8a178bc1afd32

Database specific

{
    "cpe": "cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.9.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v1.*

v1.0.0

v1.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-30550.json"