VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Jul 6, 2023· Updated Jun 17, 2026

CVE-2023-35937

CVE-2023-35937

Description

Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administrators. For example, ordinary users can be updated as space administrators. Version 2.10.2 LTS has a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • MeterSphere/MeterSpherellm-fuzzy2 versions
    <2.10.2 LTS+ 1 more
    • (no CPE)range: <2.10.2 LTS
    • (no CPE)range: < 2.10.2-LTS

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.