high8.8
CVE-2022-43437
The Download function’s parameter of EasyTest has insufficient validation for user input.
Impact
The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy Test Project | Easy Test | Version 17l18s |