Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6gfq-p2cr-3q5j

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

EPSS

Процентиль: 28%
0.00102
Низкий

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 3 лет назад

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

CVSS3: 5.3
redhat
больше 3 лет назад

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

CVSS3: 7.8
nvd
около 3 лет назад

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

CVSS3: 7.8
debian
около 3 лет назад

When saving or opening an email attachment on macOS, Thunderbird did n ...

CVSS3: 9.6
fstec
больше 3 лет назад

Уязвимость почтового клиента Thunderbird, связанная с некорректными действиями, выполняемыми пользовательским интерфейсом, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 28%
0.00102
Низкий

7.8 High

CVSS3

Дефекты

CWE-276