CVE-2021-45790

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p78

Published

Sep 29, 2022 (Sep 29, 2022)

Modified

Jun 17, 2026

Description

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands.

Vendors: metersphere
Products: metersphere
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.