What is CVE-2022-41675?

CVE-2022-41675 is a high-severity vulnerability in Raidenmaild, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 8.0/10. Published 2022-11-29.

How severe is CVE-2022-41675?

High severity. CVSS v3 base score is 8.0 out of 10.

Vulnerability in Raidenmaild

CVE-2022-41675

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

EPSS: 0.009 (55.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Raidenmaild
Team Johnlong Software Co., Ltd. Maild Mail Server — versions 4.7

Weakness classification (CWE)

CWE-1236 — Improper Neutralization of Formula Elements in a CSV File

References

twcert@cert.org.tw (Third Party Advisory)

Frequently asked questions

What is CVE-2022-41675?: CVE-2022-41675 is a high-severity vulnerability in Raidenmaild, classified under Improper Neutralization of Formula Elements in a CSV File. CVSS score: 8.0/10. Published 2022-11-29.
How severe is CVE-2022-41675?: High severity. CVSS v3 base score is 8.0 out of 10.