https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T16:27:06.442015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-23544 CVE-2022-23544 — Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting 2026-10-24T16:27:06.443276+00:00

Affected: metersphere

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in `IssueProxyResourceService::getMdImageByUrl` allows an attacker to access internal resources, as well as executing JavaScript code in the context of Metersphere's origin by a victim of a reflected XSS. This vulnerability has been fixed in v2.5.0. There are no known workarounds.