CVE-2023-50267

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-269CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-502685.5jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contaCVE-2023-502697.5Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, anCVE-2023-50277.5A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknowCVE-2023-502706.5Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommendeCVE-2023-502717.5A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited loCVE-2023-502729.8A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulneCVE-2023-502747.8HPE OneView may allow command injection with local privilege escalation.CVE-2023-502757.5HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.CVE-2023-50284.6A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issueCVE-2023-50298.8A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copCVE-2023-502906.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected enviCVE-2023-502917.5Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 be
CVE-2023-50267: Medium severity, CVSS 4.3 | Vulnix