Описание
The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:easy_test_project:easy_test:17l18s:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00838
Низкий
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 8.8
github
больше 2 лет назад
The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database.
EPSS
Процентиль: 74%
0.00838
Низкий
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89