Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w56w-w5xr-q52m

Опубликовано: 10 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

EPSS

Процентиль: 37%
0.00155
Низкий

7 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7
ubuntu
10 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 5.3
redhat
10 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 7
nvd
10 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 7
debian
10 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypt ...

CVSS3: 6.3
fstec
11 месяцев назад

Уязвимость почтового клиента Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 37%
0.00155
Низкий

7 High

CVSS3

Дефекты

CWE-290