Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w56w-w5xr-q52m

Опубликовано: 10 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

EPSS

Процентиль: 40%
0.00182
Низкий

7 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7
ubuntu
около 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 5.3
redhat
около 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 7
nvd
около 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 7
debian
около 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypt ...

CVSS3: 6.3
fstec
около 1 года назад

Уязвимость почтового клиента Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 40%
0.00182
Низкий

7 High

CVSS3

Дефекты

CWE-290