ByteOS Network

NVD Vulnerability Details :

CVE-2022-41675

Analyzed

Source-twcert@cert.org.tw

Published At-29 Nov, 2022 | 04:15

Updated At-01 Dec, 2022 | 16:47

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.0	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.0

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CPE Matches

raidenmaild>>raidenmaild>>Versions before 4.7.4(exclusive)

cpe:2.3:a:raidenmaild:raidenmaild:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1236	Primary	nvd@nist.gov
CWE-1236	Secondary	twcert@cert.org.tw

CWE ID: CWE-1236

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-1236

Type: Secondary

Source: twcert@cert.org.tw

References

Hyperlink	Source	Resource
https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html	twcert@cert.org.tw	Third Party Advisory

Hyperlink: https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html

Source: twcert@cert.org.tw

Resource:

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History