CVE-2025-53639

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53639
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53639.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-53639
Aliases
  • GHSA-vcm3-5w3f-9f45
Published
2025-07-14T20:04:29.479Z
Modified
2026-07-22T01:09:45.727241Z
Severity
  • 5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U CVSS Calculator
Summary
Metersphere has SQL Injection Vulnerability in Sorting Field
Details

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not properly validated or sanitized. An attacker can supply crafted input to inject and execute arbitrary SQL statements through the sorting functionality. This could result in modification or deletion of database contents, with a potential full compromise of the application’s database integrity and availability. Version 3.6.5-lts fixes the issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53639.json",
    "cwe_ids": [
        "CWE-89"
    ]
}
References

Affected packages

Git / github.com/metersphere/metersphere

Affected ranges

Type
GIT
Repo
https://github.com/metersphere/metersphere
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f043cdd28b46b186e9dc28cfd5d9b1886165bcd5
Database specific 
{
    "cpe": "cpe:2.3:a:metersphere:metersphere:*:*:*:*:lts:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.6.5-lts"
        },
        {
            "fixed": "3.6.5"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v1.*
v1.0.0
v1.2.0
v3.*
v3.0.0-alpha
v3.0.0-beta
v3.0.1
v3.1.0
v3.3.0
v3.5.0
v3.6.0-lts
v3.6.1-lts
v3.6.2-lts
v3.6.4-lts

Database specific

vanir_signatures_modified 
"2026-07-22T01:09:45Z"
vanir_signatures 
[
    {
        "target": {
            "function": "getSortString",
            "file": "backend/services/api-test/src/main/java/io/metersphere/api/dto/definition/ApiDefinitionBatchExportRequest.java"
        },
        "id": "CVE-2025-53639-5ba25c2e",
        "digest": {
            "function_hash": "183746892534666110931204089255133649366",
            "length": 487.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/metersphere/metersphere/commit/f043cdd28b46b186e9dc28cfd5d9b1886165bcd5"
    },
    {
        "target": {
            "file": "backend/services/api-test/src/main/java/io/metersphere/api/dto/definition/ApiDefinitionBatchExportRequest.java"
        },
        "id": "CVE-2025-53639-b02127bd",
        "digest": {
            "line_hashes": [
                "291114000272246655230552620897505226089",
                "93322485047257652136152209410991788786",
                "274174268770812581934190700525971470629",
                "7028658626043301033029640793111880890",
                "7468704431982402020856295099483553667",
                "104400284791641083280383882293646336882",
                "217606029996683373620984519541928415319",
                "307040524070969540317460726827830182630",
                "269838247441493295324211913017185269169",
                "140954537783615955765262848383420467617",
                "265708193143602543776975320481764167600",
                "20804919224784089025214038838961527549",
                "317338495804177994475567950295389697815",
                "252979475455549130471760586241206906093",
                "205053777201339960715252810558162105288",
                "251271650996899078859954156937754307151",
                "7836784513397428638074918915078542691",
                "11176133490780049234170928650842190975",
                "216166721881872175529208070116997600953",
                "184170083405766528536746366850175369522",
                "81923370417134642671686566830896693803",
                "81749626613028810284591834249275303347"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/metersphere/metersphere/commit/f043cdd28b46b186e9dc28cfd5d9b1886165bcd5"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53639.json"