CVE Vulnerabilities

CVE-2023-22278

Published: Jan 17, 2023 | Modified: Jan 24, 2023
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bypass authentication and send users unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been observed.

Affected Software

Name Vendor Start Version End Version
M-filter Daj 4.0 (including) 4.87r04 (excluding)
M-filter Daj 5.0 (including) 5.70r01 (excluding)

References