CVE-2022-43436: Easy Test Project Easy Test

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.

Affected products

• Easy Test Project Easy Test: version 22h29 only

Published 2023-01-03. Last modified 2026-06-17.