VYPR
← All advisories
High severity8.6NVD Advisory· Published Mar 9, 2023· Updated Jun 17, 2026

CVE-2023-25573

CVE-2023-25573

Description

metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in /api/jmeter/download/files, which allows any user to download any file without authentication. This issue may expose all files available to the running process. This issue has been addressed in version 1.20.20 lts and 2.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • MeterSphere/MeterSpherellm-fuzzy2 versions
    <1.20.20 lts, <2.7.1+ 1 more
    • (no CPE)range: <1.20.20 lts, <2.7.1
    • (no CPE)range: < 1.20.20 lts

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.