CVE-2022-41675CWE-1236

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

High · published November 29, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.4th percentile
Weakness
CWE-1236 · Improper Neutralization of Formula Elements in a CSV File
Published
2022-11-29T03:30Z
EPSS history
Timeline
  • 29 NOV 03:30Z
    TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection
    cvelistv5