Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qrc-jgqf-vg35

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

EPSS

Процентиль: 36%
0.00145
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-326
CWE-346

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

CVSS3: 4.3
redhat
около 3 лет назад

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

CVSS3: 4.3
nvd
больше 2 лет назад

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

CVSS3: 4.3
debian
больше 2 лет назад

When viewing an email message A, which contains an attached message B, ...

CVSS3: 4.3
fstec
около 3 лет назад

Уязвимость почтового клиента Mozilla Thunderbird, связанная с некорректной обработкой вводимых пользователем данных при обработке подписанных и зашифрованных вложенных сообщений, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 36%
0.00145
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-326
CWE-346