high8.8
CVE-2022-43436
The File Upload function of EasyTest has insufficient filtering for special characters and file type.
Impact
The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy Test Project | Easy Test | Version 22h29 |