PT-2022-16043 · Unknown · Metersphere

Fit2-Zhao + 1 · Published 2022-12-14 · Updated 2022-12-16 · CVE-2022-23512

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions MeterSphere versions prior to 2.4.1

Description The issue concerns a Path Injection vulnerability in the ApiTestCaseService::deleteBodyFiles function, which takes a user-controlled string id and uses the provided value (testId) to construct a file path. This allows an attacker to target files on the server by adding specific parameters to the URL. The vulnerability has been fixed in version 2.4.1.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the ApiTestCaseService::deleteBodyFiles function to minimize the risk of exploitation. Avoid using user-controlled input for the testId variable in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-23512

GHSA-5MWP-XW7P-5J27

Affected Products

Metersphere

References · 5

• 🔥 https://github.com/metersphere/metersphere/security/advisories/GHSA-5mwp-xw7p-5j27 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23512.json · Exploit
• https://osv.dev/vulnerability/CVE-2022-23512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23512 · Security Note
• https://t.me/cibsecurity/54507 · Telegram Post