← Database

CVE-2022-40319

HIGH CVSS: 7.5 Published: 2023-01-17 Modified: 2026-06-17

Description

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.

Affected Platforms

Lsoft Listserv

Weakness Type

CWE-639, CWE-639

References