CVE-2023-22278 - m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows

CVE-2023-22278

Summary

m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been observed.

References

https://jvn.jp/en/jp/JVN55675303/index.html

Vulnerable Configurations

cpe:2.3:a:daj:m-filter:*:*:*:*:*:*:*:*
cpe:2.3:a:daj:m-filter:*:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

24-01-2023 - 21:43

Published

17-01-2023 - 10:15

Last modified

24-01-2023 - 21:43