huaju vulnerabilities
Recent CVEs affecting huaju products. 4 tracked.
huaju has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-10-15. Highest priority: CVE-2021-42334 (score 47/100).
- CVE-2021-42336 MEDIUM 4.3 DOWNGRADE The learning history page of the Easytest is vulnerable by permission bypass
- CVE-2021-42335 MEDIUM 5.4 DOWNGRADE Easytest bulletin board management function of online learning platform does not filter special characters
- CVE-2021-42334 HIGH 8.8 DOWNGRADE The Easytest contains SQL injection vulnerabilities
- CVE-2021-42333 HIGH 8.8 DOWNGRADE The Easytest contains SQL injection vulnerabilities
FAQ
How do I fix huaju vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is huaju being exploited right now?
None of the tracked huaju CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which huaju CVE should I patch first?
CVE-2021-42334 currently ranks highest (47/100): The Easytest contains SQL injection vulnerabilities.