説明
The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker authenticated as a general user can upload and execute arbitrary files, to manipulate system or disrupt service.
AI分析AIによる分析
影響を受ける製品
easy_test_projecteasy_test
22h29
参照
- https://www.twcert.org.tw/tw/cp-132-6828-1e5e4-1.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-6828-1e5e4-1.htmlThird Party Advisory