Metersphere CVE-2021-45789目录遍历漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://access.redhat.com/security/cve/cve-2021-45789
• https://www.nsfocus.net/vulndb/72526
• https://cve.imfht.com/detail/CVE-2021-45789
• https://github.com/CrackerCat/vulnerability-lab
• https://github.com/r1is/Vulnerability_Research
• https://www.dptech.com/index.php?m=content&c=index&a=show&catid=196&id=7199&type=fd2&fileurl=/uploadfile/2023/1027/20231027032343466.pdf&filename=%E8%AF%B4%E6%98%8E%E4%B9%A6_DP-DAC-IPS-R3.1.330

Related Vulnerabilities

• PoCCVE-2022-23544: MeterSphere < 2.5.0 SSRF
• PoCCVE-2023-25573: Metersphere - Arbitrary File Read
• PoCCVE-2023-25573: Metersphere 任意文件读取漏洞
• PoCmetersphere-plugincontroller-rce: MeterSphere PluginController Pre-auth RCE
• PoCmetersphere-plugin-rce: MeterSphere - Remote Code Execution
• MeterSphere 插件接口未授权访问及远程代码执行漏洞
• MeterSphere 弱口令漏洞
• MeterSphere任意文件上传漏洞(CVE-2021-45790)
• Metersphere CVE-2021-45790目录遍历漏洞
• MeterSphere 文件读取漏洞（CVE-2023-25814）
• metersphere /api/jmeter/download/files 路径文件读取漏洞 （CVE-2023-25573）
• MeterSphere < 2.5.0存在ssrf漏洞(CVE-2022-23544)