VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 14, 2025· Updated Jun 17, 2026

CVE-2025-53639

CVE-2025-53639

Description

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not properly validated or sanitized. An attacker can supply crafted input to inject and execute arbitrary SQL statements through the sorting functionality. This could result in modification or deletion of database contents, with a potential full compromise of the application’s database integrity and availability. Version 3.6.5-lts fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MeterSphere/MeterSpherecpe-rescue3 versions
    < 3.6.5-lts+ 2 more
    • (no CPE)range: < 3.6.5-lts
    • (no CPE)range: <3.6.5-lts
    • cpe:2.3:a:metersphere:metersphere:*:*:*:*:lts:*:*:*range: <3.6.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.