Vulnerabilities

TI-2022-21233 CVE-2022-43438 · GHSA-j22m-fwc5-8qpp

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Incorrect Authorization

MEDIUM 42

The Administrator function of EasyTest has an Incorrect Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00853 Published 2023-01-03 No fix listed CWE-863

TI-2022-21232 CVE-2022-43437 · GHSA-9fh4-jgj2-72qw

MEDIUM 42

The Download function’s parameter of EasyTest has insufficient validation for user input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01003 Published 2023-01-03 No fix listed CWE-89

TI-2022-21231 CVE-2022-43436 · GHSA-5cxh-m686-g767

MEDIUM 42

The File Upload function of EasyTest has insufficient filtering for special characters and file type.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00928 Published 2023-01-03 No fix listed CWE-434