Vulnerabilities > Metersphere
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-29 | CVE-2021-45788 | SQL Injection vulnerability in Metersphere 1.15.4 Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter. | 8.8 |
| 2022-09-29 | CVE-2021-45789 | Unspecified vulnerability in Metersphere 1.15.4 An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function. | 6.5 |
| 2022-09-29 | CVE-2021-45790 | Unrestricted Upload of File with Dangerous Type vulnerability in Metersphere 1.15.4 An arbitrary file upload vulnerability was found in Metersphere v1.15.4. | 9.8 |