Описание
A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.7.4 (исключая)
cpe:2.3:a:raidenmaild:raidenmaild:*:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01148
Низкий
8 High
CVSS3
Дефекты
CWE-1236
CWE-1236
Связанные уязвимости
CVSS3: 8
github
около 3 лет назад
A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the user side.
EPSS
Процентиль: 78%
0.01148
Низкий
8 High
CVSS3
Дефекты
CWE-1236
CWE-1236