What is CVE-2024-43772?

CVE-2024-43772 is a critical-severity vulnerability in Easytest Online Test Platform, classified under SQL Injection. CVSS score: 9.8/10. Published 2024-09-02.

How severe is CVE-2024-43772?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Easytest Online Test Platform

CVE-2024-43772

SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter.

Vulnerability class: SQL Injection

EPSS: 0.005 (40.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Easytest Easytest_online_test_platform
Huachu Digital Technology Ltd. Easytest Online Test Platform — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

ART@zuso.ai (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-43772?: CVE-2024-43772 is a critical-severity vulnerability in Easytest Online Test Platform, classified under SQL Injection. CVSS score: 9.8/10. Published 2024-09-02.
How severe is CVE-2024-43772?: Critical severity. CVSS v3 base score is 9.8 out of 10.