CVE-2023-50267

Summary

CVE-2023-50267 is a vulnerability affecting the MeterSphere continuous testing platform. Prior to version 2.10.10-lts, authenticated attackers could manipulate resources that don't belong to them, if the resource ID was known. This issue allows unauthorized updates and could potentially lead to serious security consequences. The vulnerability has been addressed in version 2.10.10-lts, but there are currently no known workarounds for versions prior to this release. Users are advised to update their MeterSphere installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.