What is CVE-2022-46178?

CVE-2022-46178 is a high-severity vulnerability in Metersphere, classified under Path Traversal. CVSS score: 7.4/10. Published 2022-12-29.

How severe is CVE-2022-46178?

High severity. CVSS v3 base score is 7.4 out of 10.

Path Traversal in Metersphere

CVE-2022-46178

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.1 allow users to upload a file, but do not validate the file name, which may lead to upload file to any path. The vulnerability has been fixed in v2.5.1. There are no workarounds.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.007 (50.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L.

Affected products

Metersphere — versions < v2.5.1

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security-advisories@github.com (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2022-46178?: CVE-2022-46178 is a high-severity vulnerability in Metersphere, classified under Path Traversal. CVSS score: 7.4/10. Published 2022-12-29.
How severe is CVE-2022-46178?: High severity. CVSS v3 base score is 7.4 out of 10.