CVE-2022-41675: TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-11-29 · updated 2026-06-17
Weakness: CWE-1236

Description

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.

Affected products

Team Johnlong software Raiden MAILD Remote Management System: before 4.7.4 — fixed in 4.7.4

How to fix

Upgrade to a fixed version: Team Johnlong software Raiden MAILD Remote Management System 4.7.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-41675 or the next vulnerability affects your stack