TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection
CVE-2022-41675

8HIGH

Key Information:

Vendor

Team Johnlong Software Co., Ltd.

Status
Maild Mail Server
Vendor
CVE Published:
29 November 2022

What is CVE-2022-41675?

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Affected Version(s)

MAILD Mail Server 4.7

References

https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.