CVE-2023-30550

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some operating permissions. The issue has been fixed in version 2.9.0.

• CWE-639
• CWE-639
• CWE-639

• https://github.com/metersphere/metersphere/releases/tag/v2.9.0Release Notes
• https://github.com/metersphere/metersphere/security/advisories/GHSA-j5cq-cpw2-gp2qExploit, Third Party Advisory
• https://github.com/metersphere/metersphere/releases/tag/v2.9.0Release Notes
• https://github.com/metersphere/metersphere/security/advisories/GHSA-j5cq-cpw2-gp2qExploit, Third Party Advisory

Published

May 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30545PrestaShop is an Open Source e-commerce web application. Pri…6.5
• CVE-2023-30546Contiki-NG is an operating system for Internet of Things dev…7.5
• CVE-2023-30547vm2 is a sandbox that can run untrusted code with whiteliste…10
• CVE-2023-30548gatsby-plugin-sharp is a plugin for the gatsby framework whi…4.3
• CVE-2023-30549Apptainer is an open source container platform for Linux. Th…7.8
• CVE-2023-3055The Page Builder by AZEXO plugin for WordPress is vulnerable…4.3
• CVE-2023-30551Rekor is an open source software supply chain transparency l…7.5
• CVE-2023-30552Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30553Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30554Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30555Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30556Archery is an open source SQL audit platform. The Archery pr…6.5