Description
The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HWA JIUH DIGITAL TECHNOLOGY | EasyTest | 22H29 | — |