{"api_version":"1","generated_at":"2026-07-23T13:24:11+00:00","cve":"CVE-2022-41675","urls":{"html":"https://cve.report/CVE-2022-41675","api":"https://cve.report/api/cve/CVE-2022-41675.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-41675","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-41675"},"summary":{"title":"CVE-2022-41675","description":"A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.","state":"PUBLIC","assigner":"cve@cert.org.tw","published_at":"2022-11-29 04:15:00","updated_at":"2022-12-01 16:47:00"},"problem_types":["CWE-1236"],"metrics":[],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html","name":"https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html","refsource":"MISC","tags":[],"title":"TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報-村榮資訊 雷電MAILD Mail Server -- Formula Injection","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41675","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41675","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"41675","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"raidenmaild","cpe5":"raidenmaild","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"AKA":"TWCERT/CC","ASSIGNER":"cve@cert.org.tw","DATE_PUBLIC":"2022-11-29T02:57:00.000Z","ID":"CVE-2022-41675","STATE":"PUBLIC","TITLE":"TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"MAILD Mail Server","version":{"version_data":[{"version_affected":"=","version_value":"4.7"}]}}]},"vendor_name":"TEAM JOHNLONG SOFTWARE CO., LTD."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-1236 Improper Neutralization of Formula Elements in a CSV File"}]}]},"references":{"reference_data":[{"refsource":"MISC","url":"https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html","name":"https://www.twcert.org.tw/tw/cp-132-6738-b78f4-1.html"}]},"solution":[{"lang":"eng","value":"Update version to v4.7.4"}],"source":{"advisory":"TVN-202211001","discovery":"EXTERNAL"}},"nvd":{"publishedDate":"2022-11-29 04:15:00","lastModifiedDate":"2022-12-01 16:47:00","problem_types":["CWE-1236"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH"},"exploitabilityScore":2.1,"impactScore":5.9}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:raidenmaild:raidenmaild:*:*:*:*:*:*:*:*","versionEndExcluding":"4.7.4","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}