Is CVE-2024-36118 actively exploited?

No active exploitation of CVE-2024-36118 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-36118 be exploited remotely?

Yes. CVE-2024-36118 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-36118?

CVE-2024-36118 has a CVSS score of 4.3 (MEDIUM).

HOME VULNERABILITIESCVE-2024-36118

MEDIUM

CVE-2024-36118

CWE-200Published: May 30, 2024· Updated: Jun 17, 2026

4.3

CVSS v3.1

Official Description

MeterSphere is a test management and interface testing tool. In affected versions users without workspace permissions can view functional test cases of other workspaces beyond their authority. This issue has been addressed in version 2.10.15-lts. Users of MeterSphere are advised to upgrade. There are no known workarounds for this vulnerability.

NVD Source

Technical Analysis

CVE-2024-36118 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.