CVE-2022-41675 - CVE House
Back to Database
Status published High CVE-2022-41675

TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

Vulnerability Description

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-41675

Credits & Attribution

No credits recorded in the NVD database.

References

More from TEAM JOHNLONG SOFTWARE CO., LTD.

View All →
CVE-2022-41676
TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting
Medium 5.4

Affected Vendor

TEAM JOHNLONG SOFTWARE CO., LTD.

View all reports →

Affected Software

MAILD Mail Server
Vulnerable Versions:
4.7

Timeline

Official Publish: November 29th, 2022
Last Modified: April 25th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1236

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.