raiden-services (0.13.2), spotify-dl (>=7.3.0, <=7.6.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.19.4)

sentry-sdk PYPI version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.13.2 - spotify-dl =7.3.0, =7.6.0 Source cves: CVE-2023-28117 Source advisory: OSV:GHSA-29PR-6JR8-Q5JM...

raiden-services (0.12.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.17.6)

sentry-sdk PYPI version 0.17.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.12.0 Source cves: CVE-2023-28117 Source advisory: OSV:GHSA-29PR-6JR8-Q5JM...

CVE-2022-41676

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41675

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

Cross site scripting

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41676

CVE-2022-41676 affects Raiden MAILD Mail Server. The issue is insufficient filtering of user input in the website mail field, allowing a remote attacker with general user privileges to submit input containing malicious JavaScript that triggers a reflected XSS attack on the mail recipient. The vul...

CVE-2022-41676 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41675 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

CVE-2022-41675 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

Team Johnlong software Raiden MAILD Mail Server 安全漏洞

Team Johnlong software Raiden MAILD Mail Server is a mail server software from Team Johnlong software. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server versions prior to v4.7.4. The vulnerability originates from the fact that a remote attacker with general user...

PT-2022-26018 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: A remote attacker with general user privilege can inject malicious code in the form content of the Raiden MAILD Mail Server website. When other users export the form conten...

Team Johnlong software Raiden MAILD Mail Server 跨站脚本漏洞

Team Johnlong software Raiden MAILD Mail Server is a mail server software from China Village Rong Information Team Johnlong software Company. A security vulnerability exists in Team Johnlong software Raiden MAILD Mail Server versions prior to v4.7.4, which stems from insufficient filtering of use...

PT-2022-26019 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: The issue is related to insufficient filtering for user input in the website mail field of the Raiden MAILD Mail Server. A remote attacker with general user privilege can...

CVE-2022-41676: Doubled Character XSS Manipulations

Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...

CVE-2022-41675: Improper Neutralization of Formula Elements in a CSV File

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2022-41952 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2022-41952 Source advisory: MEND:CVE-2022-41952...

@syncpoint/odrix (>=1.2.0, <=1.3.4), matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) +1 more potentially affected by CVE-2022-39236 via matrix-js-sdk (>=17.2.0, <=19.6.0)

matrix-js-sdk NPM version =17.2.0, =1.2.0, =3.48.0-rc.1, =2.2.0, =3.1.0 Source cves: CVE-2022-39236 Source advisory: OSV:GHSA-HVV8-5V86-R45X...

@syncpoint/odrix (>=1.2.0, <=1.3.4), matrix-react-sdk (>=3.48.0-rc.1, <=3.55.0) +1 more potentially affected by CVE-2022-39236 via matrix-js-sdk (>=17.2.0, <=19.6.0)

matrix-js-sdk NPM version =17.2.0, =1.2.0, =3.48.0-rc.1, =2.2.0, =3.1.0 Source cves: CVE-2022-39236 Source advisory: GHSA-HVV8-5V86-R45X...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2022-31152 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2022-31152 Source advisory: OSV:PYSEC-2022-262...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2022-31152 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2022-31152 Source advisory: OSV:GHSA-JHJH-776M-4765...