Easy Test Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Easy Test Project records in CISA KEV

No Easy Test Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Easy Test · all components

TI-2022-21233 CVE-2022-43438 · GHSA-j22m-fwc5-8qpp

MEDIUM 42

The Administrator function of EasyTest has an Incorrect Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00853 Published 2023-01-03 No fix listed CWE-863

TI-2022-21232 CVE-2022-43437 · GHSA-9fh4-jgj2-72qw

MEDIUM 42

The Download function’s parameter of EasyTest has insufficient validation for user input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01003 Published 2023-01-03 No fix listed CWE-89

TI-2022-21231 CVE-2022-43436 · GHSA-5cxh-m686-g767

MEDIUM 42

The File Upload function of EasyTest has insufficient filtering for special characters and file type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00928 Published 2023-01-03 No fix listed CWE-434