Vulnerabilities

TI-2021-18766 CVE-2021-42336 · GHSA-g2g9-w63f-6jrm

Huachu Digital Technology Co.,Ltd. Easytest - Improper Authorization

LOW 22

The learning history page of the Easytest is vulnerable by permission bypass.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00845 Published 2021-10-15 No fix listed CWE-285

TI-2021-18765 CVE-2021-42335 · GHSA-89rc-4jgm-q84x

LOW 25

Easytest bulletin board management function of online learning platform does not filter special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-10-15 No fix listed CWE-79

TI-2021-18764 CVE-2021-42334 · GHSA-cw52-x4mw-m42c

MEDIUM 40

The Easytest contains SQL injection vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2021-10-15 No fix listed CWE-89

TI-2021-18763 CVE-2021-42333 · GHSA-6gh7-h93w-h6pc

MEDIUM 40

The Easytest contains SQL injection vulnerabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2021-10-15 No fix listed CWE-89