CVE-2021-45790: Metersphere

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands.

Affected products

• Metersphere Metersphere: version 1.15.4 only

Published 2022-09-29. Last modified 2026-06-17.