CVE-2022-23544 Scanner
CVE-2022-23544 scanner - SSRF vulnerability in MeterSphere
Used 3.4k times · 3.4k assets checked · url
CVE
CVE-2022-23544
6.1
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in `IssueProxyResourceService::getMdImageByUrl` allows an attacker to access internal resources, as well as executing JavaScript code in the context of Metersphere's origin by a victim of a reflected XSS. This vulnerability has been fixed in v2.5.0. There are no known workarounds.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
metersphere
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: metersphere
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →