critical9.8
CVE-2021-45790
An arbitrary file upload vulnerability was found in Metersphere v1.15.4.
Impact
An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metersphere | Metersphere | Version 1.15.4 |