Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-43436

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File Upload

Description

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest

  • 22H29affected

References