VULNERABILITY INTELLIGENCE

CVE-2022-41675

CVSS score8 HIGH
EPSS probability0.94%
CISA KEVNot currently listed
Published2022-11-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Weakness classification

  • CWE-1236: Improper Neutralization of Formula Elements in a CSV File

Primary references