Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p4jr-wm76-h2v3

Опубликовано: 19 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

EPSS

Процентиль: 7%
0.00029
Низкий

7.4 High

CVSS3

Дефекты

CWE-146

Связанные уязвимости

CVSS3: 7.4
ubuntu
почти 3 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
redhat
больше 3 лет назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
nvd
почти 3 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked.

CVSS3: 7.4
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 7.4
debian
почти 3 года назад

When xdg-mail is configured to use thunderbird for mailto URLs, improp ...

EPSS

Процентиль: 7%
0.00029
Низкий

7.4 High

CVSS3

Дефекты

CWE-146