CVE

CVE-2024-32467

Date: (C)2024-04-25   (M)2024-04-26

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue.

Reference:

https://github.com/metersphere/metersphere/security/advisories/GHSA-7499-q88f-mxqp