CVE-2022-46178
1 advisory.
Maven/io.metersphere:metersphere CVE-2022-46178: high 7.4
Path Traversal In MeterSpere leads to upload file to any path
Action: Upgrade io.metersphere:metersphere to 2.5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.1 | - |
Fixed versions
| 2.5.1 |
Sources
- osv: GHSA-9p62-x3c5-hr5p
- https://github.com/metersphere/metersphere/security/advisories/GHSA-9p62-x3c5-hr5p
- https://nvd.nist.gov/vuln/detail/CVE-2022-46178
- https://github.com/metersphere/metersphere
- https://github.com/metersphere/metersphere/blob/v2.5.0/framework/sdk-parent/sdk/src/main/java/io/metersphere/commons/utils/FileUtils.java#L5
- https://github.com/metersphere/metersphere/releases/tag/v2.5.1
CVE-2022-46178 · published · modified · JSON