CVE-2022-43436 — HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File Upload

CVE-2022-43436

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Arbitrary File Upload PUBLISHED

Description (CNA)

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.

Affected (CNA)

Vendor / product	Versions
HWA JIUH DIGITAL TECHNOLOGY LTD. / EasyTest	affected 22H29

CWE

CWE-434

References

https://www.twcert.org.tw/tw/cp-132-6828-1e5e4-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6828-1e5e4-1.html

CISA-ADP

No English description supplied.

No references supplied.