metersphere — Vulnerabilities & Security Advisories 17

MeterSphere serves as an open-source continuous testing platform for APIs, UIs, and performance, primarily used in DevSecOps workflows. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and access control flaws. The platform's security posture has been impacted by multiple CVEs, with some instances allowing unauthorized access or system compromise due to insecure default configurations and insufficient authentication mechanisms. While no major public security incidents have been widely documented, the consistent discovery of vulnerabilities highlights ongoing challenges in secure development practices within the continuous testing ecosystem.