High severity7.5NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2022-40319

Description

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL. The impact is unauthorized modification of a victim's LISTSERV account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lsoft/Listserv2 versions
cpe:2.3:a:lsoft:listserv:17.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lsoft:listserv:17.0:*:*:*:*:*:*:*
- (no CPE)range: 17
LISTSERV/LISTSERVdescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/2301-exploits/listserv17-idor.txtnvdThird Party AdvisoryVDB Entry
peach.ease.lsoft.com/scripts/wa-PEACH.exenvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000