CVE-2023-38494

Summary

CVE-2023-38494 is a vulnerability affecting the Cloud version of MeterSphere, an open-source continuous testing platform. Before the release of version 2.10.4 LTS, certain interfaces in the Cloud version lacked proper configuration permissions, making them susceptible to sensitive data exposure if attacked. This issue has been addressed in the latest version through the implementation of a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.