CVE-2021-45789

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p57

Published

Sep 29, 2022 (Sep 29, 2022)

Modified

Jun 17, 2026

Description

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function.

Vendors: metersphere
Products: metersphere
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.