{"id":"CVE-2022-23544","summary":"Server-Side Request Forgery in Metersphere leads to Cross-Site Scripting","details":"MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in `IssueProxyResourceService::getMdImageByUrl` allows an attacker to access internal resources, as well as executing JavaScript code in the context of Metersphere's origin by a victim of a reflected XSS. This vulnerability has been fixed in v2.5.0. There are no known workarounds. ","aliases":["GHSA-vrv6-cg45-rmjj"],"modified":"2026-08-12T12:59:41.740105Z","published":"2022-12-27T23:57:42.208Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-79","CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23544.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23544.json"},{"type":"ADVISORY","url":"https://github.com/metersphere/metersphere/security/advisories/GHSA-vrv6-cg45-rmjj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23544"},{"type":"FIX","url":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/metersphere/metersphere","events":[{"introduced":"0"},{"fixed":"1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c"},{"fixed":"d0f95b50737c941b29d507a4cc3545f2dc6ab121"}],"database_specific":{"cpe":"cpe:2.3:a:metersphere:metersphere:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.5.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.2.0","v1.0.0"],"database_specific":{"vanir_signatures_modified":"2026-08-12T12:59:41Z","vanir_signatures":[{"deprecated":false,"digest":{"length":523,"function_hash":"77110813163076223269964780688231298405"},"id":"CVE-2022-23544-02612adb","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java","function":"setModule"}},{"target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java"},"deprecated":false,"digest":{"line_hashes":["74597424048713370625982061955848967346","80400195144060427157536157625941316421","278622059026872862423949847973671196730","207952611243737198472671079911154459746","233242308441286068455009446401530137776","134052033360985293444525097200119615911","184909783338548346545477627066241699369","137044233178490142685876826653310007100"],"threshold":0.9},"id":"CVE-2022-23544-0dcfd244","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c"},{"deprecated":false,"digest":{"function_hash":"98269606176672445667308120396951368141","length":527},"id":"CVE-2022-23544-0e3400a1","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java","function":"setModule"}},{"signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java"},"deprecated":false,"digest":{"line_hashes":["278272468182809943751333322377069275211","71951828196873899677438052542062045222","109854239411965260484724541630281256069","188044748739389772539548576830603601632","285117938107047641169984029204748101350","68106147602694076981046808918931154905","286022130004298243619121116320605765985","321004169980479186743522093082299493071","128526766095259019247329231260784935721","51807684610725627000622707640022222682","171477103814628376872054511891482354837","155648858392908921231963377364750132972","285367111953035841530880719011431995504","312770132383488658777900224255791150077","297530262053536731836653544130919081230","296760156087575533856935637162120814484","207959224194094800927404467344540554956","285235313566469073362857561046448328359","188598314509144915819602622670650829711","111861678087947991637470044719506802735","31654687221518050321666463510277839379","277274012059332355248683914027770328412","117784581313419710675834262524787955640","14237687698053701333385236007462657583","136239285941366799835269877115450612615","237999526066584084813245701537429215239","275931143919445627371129738382229836771","318187694863020497912169431223102176486"],"threshold":0.9},"id":"CVE-2022-23544-12832e60","signature_type":"Line"},{"target":{"file":"framework/gateway/src/main/java/io/metersphere/gateway/filter/SessionFilter.java"},"deprecated":false,"digest":{"line_hashes":["73012844264392230114557029495693704990","287579198236347321321056400239521097132","287093741814966608887199273827068378098","141660376646691758208402541383043988785"],"threshold":0.9},"id":"CVE-2022-23544-1cdf440a","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121"},{"target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionService.java","function":"initModulePathAndId"},"deprecated":false,"digest":{"function_hash":"287715581143733191504860747391176947800","length":380},"id":"CVE-2022-23544-31f23bd6","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["196795775458630884148250553376607301375","312147203205727664970640226657378254793","16043571997357815695083760964770872069","105218003465449205922932309624875465403","183204368507815836150533362546584928314","31641505541794726815628678660868750303","168335795384697236819621211724252666660","239835071221777489275507989008625553788","16566738496848476551972956217255000633","17317227621677100851641452095500534888","98816131018193339976311256868835409742","68235600361303531371410668866076308625","87890018920384714387809256253739084951","5130210932298351971792565190337942945","17858445232430469816716363856447037296","25738654777131913801369704533088268756","288309063321684847810189310694675723435","265420056526929638187860268819166167594"]},"id":"CVE-2022-23544-37630588","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java"}},{"deprecated":false,"digest":{"line_hashes":["96753561836076734791035700554422133036","337080444097918133808766242162865344290","326431668588751926960217192496207824434","161492388346946461818706279211832658750"],"threshold":0.9},"id":"CVE-2022-23544-3e68406a","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"framework/sdk-parent/xpack-interface/src/main/java/io/metersphere/xpack/track/issue/IssuesPlatform.java"}},{"deprecated":false,"digest":{"line_hashes":["104731573689432278739214341050020048203","51232660250243406062001540347909724173","313037619441586746731258703249351752709","15444727491872297616245540636871869157","163334462489536197078047422447522643395","95802242869091219876474084835630380608","182765256290521948546697827662569395983","214561125267332133459363948700495816230","302758266112706469056577103073898985395","182915007330031465772360242326897599018"],"threshold":0.9},"id":"CVE-2022-23544-47a4b9e1","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/issue/client/ZentaoClient.java"}},{"signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"function":"getDefaultNode","file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"},"deprecated":false,"digest":{"function_hash":"286418042677208434713815213295066598338","length":711},"id":"CVE-2022-23544-491f4156","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"287768926049425336504149792348990194915","length":1111},"id":"CVE-2022-23544-4adb1b5c","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java","function":"ms2ZentaoDescription"}},{"source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java","function":"getMdImageByUrl"},"deprecated":false,"digest":{"function_hash":"216015865289522062832475182931546311249","length":408},"id":"CVE-2022-23544-4d85a64f","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiDefinitionImportUtil.java"},"deprecated":false,"digest":{"line_hashes":["160349206914177042447156744963406420480","147731899244851609429641297445128380930","83520201094614421543572100521372894336","49306493526114162771332189343336842241","292790224753109177223202949631377374273","80400195144060427157536157625941316421","278622059026872862423949847973671196730","207952611243737198472671079911154459746"],"threshold":0.9},"id":"CVE-2022-23544-54f6c8cd","signature_type":"Line"},{"digest":{"function_hash":"98301173623096570048903995007173050993","length":1200},"id":"CVE-2022-23544-64a8c4c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/IssuesService.java","function":"list"},"deprecated":false},{"target":{"file":"test-track/backend/src/main/java/io/metersphere/service/issue/platform/AbstractIssuePlatform.java","function":"getImageFiles"},"deprecated":false,"digest":{"function_hash":"261572236257471119016214816356873181875","length":991},"id":"CVE-2022-23544-6e1bc3b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121"},{"source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/IssuesService.java","function":"replaceJiraMdUrlParam"},"deprecated":false,"digest":{"function_hash":"94123660613932161223774646362639224341","length":219},"id":"CVE-2022-23544-734c455d","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/listener/ProjectCreatedListener.java","function":"initProjectDefaultNode"},"deprecated":false,"digest":{"function_hash":"60039552873452331971343380745113908295","length":972},"id":"CVE-2022-23544-80aa9554","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":665,"function_hash":"271947535934166749995371920115019080428"},"id":"CVE-2022-23544-8ff330db","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java","function":"getDefaultNode"}},{"deprecated":false,"digest":{"function_hash":"146414697067060893507172168799528741996","length":513},"id":"CVE-2022-23544-9301aabb","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"function":"getPlatform","file":"test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"}},{"deprecated":false,"digest":{"line_hashes":["280511768823416514089393505066573936081","13984514033877791125606084394431450996","70405213588916669206100468164880379672","246344244076844376596866099332421301501","297523488178636858783026468402885025237","234100822865688781764003817645912555813","115773543563579930641430653061387293003","202104348429010904953560398144306771435","243818748815016011021108718373416539811","267112579749087364914531715508143681298","26923977889835446114289969214184151355","112208873339597136503820391142031795293","302114033514290745619329156368610865523","55960976604392221676229483135664261005","139771752612901251384154624151330406373","6739086392716478819945707660648441924","329984029214533482751347685330459030934","154272831528505850080863364606551099012","222655434796735012648898544800164494386","294549523779424271935729592412761925268","202408994877015872718836405579956745833","153661005636825431566327490000571200477","189464945578034910569854540430844479705","290732184802515455941607111046886145799","65886677039749726357689662446141316482","283190725189730201971090623250433995468","67230075476631304566704081125879668966","200609033651997209062467299514045908398","179527679123774875330012331060806872043","302944881530201292558533004870224192541","72941395479538537375420246962084132544","286233675481951940903622182223269461237","56952200270511317368632621610829566170","15702499383480135195262928698835394870","97310952841822046901281288927205804277","310807766349500679027617301078144743658","286799705667293676298986209175912483188","331906166212789473597818449985055876930"],"threshold":0.9},"id":"CVE-2022-23544-9af94fbd","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"}},{"deprecated":false,"digest":{"line_hashes":["261085846822311363872844980137152811097","16593243078159745149112726971474223195","108958092191815419838256049022007847398","67225851600991466878592480808592030184","60581400947250932001631422812821762853","130642373384009873117956879206076390833","81075515504970747640574286012008402395","185702507388332849026350926217943099739","305955328308795461942490738592646074544","16881580633592024422351799291942648703","37047104494433703433724581400805071607","309123623265557250369599461459529456523","251465060078287026105982948298948721463","216346200691770967892170870301048295598","71231825995914495893616545862654736071","73163048486292904456310636277095043110","141514540829183957678012551986674663695","121580317427605391217154653776851077471"],"threshold":0.9},"id":"CVE-2022-23544-9c1f7e3f","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"}},{"id":"CVE-2022-23544-9ee159ce","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java"},"deprecated":false,"digest":{"line_hashes":["45140661053818958247775477485250786644","243866624756393825099038683493653741081","142925759390539416279573690960035801164","77419600739035750755945410835165217537","147314177625976156637838750577718703897","277417212941410750305869323398758180113"],"threshold":0.9}},{"target":{"function":"packageDescriptionByPathAndName","file":"test-track/backend/src/main/java/io/metersphere/service/issue/platform/ZentaoPlatform.java"},"deprecated":false,"digest":{"function_hash":"14377578564671242143900961085847058946","length":1208},"id":"CVE-2022-23544-a7914efd","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121"},{"signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/controller/IssueProxyResourceController.java","function":"getFileByUrl"},"deprecated":false,"digest":{"function_hash":"284208171327687232706517640587340042023","length":277},"id":"CVE-2022-23544-a8b8756a","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"225385307528387296242130851522297046422","length":795},"id":"CVE-2022-23544-aaba8054","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java","function":"dealNoModuleData"}},{"id":"CVE-2022-23544-b4d94bab","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java"},"deprecated":false,"digest":{"line_hashes":["222402245280061330549680870607294530648","289905560871697662223757333859920415779","14697526473666000140589549997944726492","73574124535547208894988364970296253304","130256283396663707654054987661602520904","283572282235852078276460843037083440814","11787278805150716069723747626187018089","162455559552731330176622156363568235560","22334077816143116663024594343412594434","162409620187044018576377379503905216661","1904111412676151990019924987917519629","84419609645501210644937049552870091627","63296024205187108156770491452396890423","44492560274996084871354966357247984570","133687684314275171149227784140768899922","206694450888054013572414858682923712916","88865677176790709623725683808409630349","213277545811320506350251463241188094543","76721161450330510765858970780009557280","255600682972385627679119381564779050303","33480585626503338337804887948539695835","208483972291520012362829766014268808919","320565492165136201373036846535823752023","30560426698047264364963978333526377504","328288338623221814023423111591575337089","49456992866032981313676056898895697448","112443548835750928086002410831212975247","146379125709788091207893920993824078723","338680659165998798152565070391246697463","19332488788603264423893229343962058960","87019283793657214396701480466943451094","111038702318403948577527526321905413768","181551219314061894997174876275640849421","152956198677936677111463997527807624204","131396123333700819024460749752766213990","256633187406756402541362931432963364337","44191306562617299947037894428948444167","232291103753518685912873093130090706978","147628775333940412816651555575556289697","254284674686714701547950944239443087315","89750096744968656616023281010179320550","133832090419468890161169384692281759125","32501426815323623391475178770318058182","115845754318846903185965075583507396906","65414875540611463333232018403977619800","107252165025512687200143143596923464134","17042532732903691147791953338021772940","259897803813904807490497777652547918945","157437110658841877599176896649188723259","241105582635798524795650021092889281440","121479058264151672128525139161153095309","89750096744968656616023281010179320550","337160560467578645371214691278507315493","137445605693246550866675101508666130184","191799228766914010097852586339967055858","297511574642409794879342500495757207989","143704291393499768911068873538795330801","66923118750981902695604767647874258640","174305686370370409679882866282061221249","150128791857864762550534135399874981835","269824057648858177940089312835984819129","3381565200042349207611069717622562816","142265392778320648391344527611290586503","149109118628706427135807011014240297570","269824057648858177940089312835984819129","3381565200042349207611069717622562816","285148124486106241898975564675612134952","68218744864252736535147448789814623622","259320049084666124223471547544191929224","125286532665786734105881151303911369831","319722149849100146494219771675391600998","270428413605264327252290726825264111257","171501788649617725180327382162670827138","235987852783806009928765153318943342996","101032147783327701835657975289322369493","232553452740850048356812062587252073069","243726132121131647514840703027916761567","93588731297456292418906019284691873701","183817461140099373508121398513184303650","328982402551109193508074573056072144396"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java","function":"setModule"},"deprecated":false,"digest":{"length":1416,"function_hash":"327090266812510986042514661424777104586"},"id":"CVE-2022-23544-b633de0e"},{"source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java","function":"replenishScenarioModuleIdPath"},"deprecated":false,"digest":{"function_hash":"130441342339627305960364211417201069251","length":358},"id":"CVE-2022-23544-baa9585c","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"317635486761256101590532433116959348495","length":964},"id":"CVE-2022-23544-bea1262f","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"function":"handleJiraIssueMdUrl","file":"test-track/backend/src/main/java/io/metersphere/service/IssuesService.java"}},{"source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioService.java"},"deprecated":false,"digest":{"line_hashes":["121091239688263335219630949546794071736","163107326363096523125664167948664905988","197327421144043305959840517951555602998","123280177621905834499572829627684326787"],"threshold":0.9},"id":"CVE-2022-23544-cf84b383","signature_type":"Line","signature_version":"v1"},{"target":{"file":"api-test/backend/src/main/java/io/metersphere/service/definition/ApiModuleService.java","function":"getDefaultNodeUnCreateNew"},"deprecated":false,"digest":{"function_hash":"139422468988274053594253252339311135088","length":325},"id":"CVE-2022-23544-efac217e","signature_type":"Function","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c"},{"digest":{"line_hashes":["29157381437871380938878930372372325541","181303917191981290187068398184840396308","281764158105859630175977404387493073011","304285694422565054913608007266982689885","278730375576495053258462166750322686463","36759592528653042853637481198353335556","115175280774467255361303673002061491529","252953681829500709626842993287806127487","121120130622466068829265828949506869148","221522663221509936711841130292622737076","1273695540759509653905855891763572833","269932115789218713762933126026896629876","79165981814158609230338484195989604558","311575270029738126941768558071735731970","223261684746928011210437901490929508550","74990744622745911569453630610629580546","138757364690304626285434878973442139176","201936417802517596632722503221868353309","210426139174828880467897380254928789612","173530249456698254868992558462139500732","39643933930835277707516807712449459741"],"threshold":0.9},"id":"CVE-2022-23544-f6b1b83a","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/1e7e6908c5f2a30981e99bf6e6ecdb41079fc39c","target":{"file":"api-test/backend/src/main/java/io/metersphere/service/scenario/ApiScenarioModuleService.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/wapper/IssueProxyResourceService.java"},"deprecated":false,"digest":{"line_hashes":["193914868186326583689439550745463868932","203741725656487241878460312271458892896","143878349011649714259848876680508772326","8613616418781143768214645815809571942","279660435419233574615848328316083003550","79998254825375923600877757833055632648","136891166673294162300678283028953351291","144161633599534820057758601608335261997","13240015967030837025139651391657499496","83656030195338160315975235643309769773","123995859995920872217168398077549654061","53662536543994859797652218663119491025","123656898780226417789204351179493474680","278469691488865729975517106200238114547","41466863327417758846350400986578485147","267148434200623980592800079072089886900","224795161448405645610964293660417220983"],"threshold":0.9},"id":"CVE-2022-23544-f9fc1aa3","signature_type":"Line"},{"digest":{"line_hashes":["306241700120245737341023030112955945471","45622321982235277891883036960615826857","66095479715111338992189649457160390198","197397760568196978982969565488629949164"],"threshold":0.9},"id":"CVE-2022-23544-fc9a2388","signature_type":"Line","signature_version":"v1","source":"https://github.com/metersphere/metersphere/commit/d0f95b50737c941b29d507a4cc3545f2dc6ab121","target":{"file":"test-track/backend/src/main/java/io/metersphere/service/PlatformPluginService.java"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23544.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"}]}