Metersphere

Metersphere is a performance and load-testing platform that, despite a narrow product portfolio, occupies a notable position in the testing and quality-assurance landscape. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity and a moderate tendency toward public exploit availability. The exposure centers on the flagship Metersphere product and recurs through weakness classes including sensitive-information disclosure, path-traversal conditions, missing authorization checks, and authorization-bypass flaws that are characteristic of web-based testing tools with broad system-access requirements. Defenders should prioritize this vendor's advisories for internet-exposed or production-adjacent testing deployments, as authentication and access-control weaknesses in testing infrastructure can propagate to the systems being tested. Current exploitation activity and exposure counts are shown alongside this summary.