PatchTheCVEeasy test vulnerabilities and fixes
Recent CVEs affecting easy test, with upgrade or downgrade steps. 3 tracked.
Also searched as: easytest.
easy test has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-01-03. Highest priority: CVE-2022-43437 (score 46/100).
- CVE-2022-43438 HIGH 8.8 UPGRADE The Administrator function of EasyTest has an Incorrect Authorization vulnerability
- CVE-2022-43437 HIGH 8.8 DOWNGRADE The Download function’s parameter of EasyTest has insufficient validation for user input
- CVE-2022-43436 HIGH 8.8 DOWNGRADE The File Upload function of EasyTest has insufficient filtering for special characters and file type
FAQ
How do I fix easy test vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is easy test being exploited right now?
None of the tracked easy test CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which easy test CVE should I patch first?
CVE-2022-43437 currently ranks highest (46/100): The Download function’s parameter of EasyTest has insufficient validation for user input.