MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which dont belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Metersphere | Metersphere | * | 2.10.10 (excluding) |