What is CVE-2021-42333?

CVE-2021-42333 is a high-severity vulnerability in Huachu Digital Technology Co.,ltd. Easytest, classified under SQL Injection. CVSS score: 8.8/10. Published 2021-10-15.

How severe is CVE-2021-42333?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Huachu Digital Technology Co.,ltd. Easytest

CVE-2021-42333

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions.

Vulnerability class: SQL Injection

EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huachu Digital Technology Co.,ltd. Easytest — versions 1705
Huaju Easytest_online_learning_test_platform — versions 1705

Weakness classification (CWE)

CWE-89 — SQL Injection

References

twcert@cert.org.tw (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-42333?: CVE-2021-42333 is a high-severity vulnerability in Huachu Digital Technology Co.,ltd. Easytest, classified under SQL Injection. CVSS score: 8.8/10. Published 2021-10-15.
How severe is CVE-2021-42333?: High severity. CVSS v3 base score is 8.8 out of 10.