Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2022-41675

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server

  • 4.7affected

References