mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-06-07 05:26:24 +00:00
13 lines
1.0 KiB
Markdown
13 lines
1.0 KiB
Markdown
## MeterSphere File Read Vulnerability(CVE-2023-25814)
|
||
|
||
| **Vulnerability** | **MeterSphere File Read Vulnerability(CVE-2023-25814)** |
|
||
| :----: | :-----|
|
||
| **Chinese name** | MeterSphere 文件读取漏洞（CVE-2023-25814） |
|
||
| **CVSS core** | 7.5 |
|
||
| **FOFA Query** (click to view the results directly)| [app="FIT2CLOUD-MeterSphere"](https://en.fofa.info/result?qbase64=YXBwPSJGSVQyQ0xPVUQtTWV0ZXJTcGhlcmUi) |
|
||
| **Number of assets affected** | 2552 |
|
||
| **Description** | MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing and performance testing, and is fully compatible with mainstream open source standards such as JMeter and Selenium. MeterSphere has an unauthorized arbitrary file read vulnerability. |
|
||
| **Impact** | Attackers can use this vulnerability to read the leaked source code, database configuration files, etc., resulting in an extremely insecure website. |
|
||
|
||
|