Логотип exploitDog
bind:"CVE-2025-3523"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2025-3523"

Количество 10

Количество 10

ubuntu логотип

CVE-2025-3523

2 месяца назад

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
EPSS: Низкий
redhat логотип

CVE-2025-3523

2 месяца назад

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
EPSS: Низкий
nvd логотип

CVE-2025-3523

2 месяца назад

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
EPSS: Низкий
debian логотип

CVE-2025-3523

2 месяца назад

When an email contains multiple attachments with external links via th ...

CVSS3: 6.4
EPSS: Низкий
github логотип

GHSA-4h7q-pj8m-5675

2 месяца назад

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:1366-1

около 2 месяцев назад

Security update for MozillaThunderbird

EPSS: Низкий
redos логотип

ROS-20250515-08

около 1 месяца назад

Множественные уязвимости thunderbird

CVSS3: 6.4
EPSS: Низкий
oracle-oval логотип

ELSA-2025-7435

29 дней назад

ELSA-2025-7435: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-4649

около 1 месяца назад

ELSA-2025-4649: thunderbird security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-4229

около 2 месяцев назад

ELSA-2025-4229: thunderbird security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-3523

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
0%
Низкий
2 месяца назад
redhat логотип
CVE-2025-3523

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
0%
Низкий
2 месяца назад
nvd логотип
CVE-2025-3523

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
0%
Низкий
2 месяца назад
debian логотип
CVE-2025-3523

When an email contains multiple attachments with external links via th ...

CVSS3: 6.4
0%
Низкий
2 месяца назад
github логотип
GHSA-4h7q-pj8m-5675

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

CVSS3: 6.4
0%
Низкий
2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:1366-1

Security update for MozillaThunderbird

около 2 месяцев назад
redos логотип
ROS-20250515-08

Множественные уязвимости thunderbird

CVSS3: 6.4
около 1 месяца назад
oracle-oval логотип
ELSA-2025-7435

ELSA-2025-7435: thunderbird security update (IMPORTANT)

29 дней назад
oracle-oval логотип
ELSA-2025-4649

ELSA-2025-4649: thunderbird security update (IMPORTANT)

около 1 месяца назад
oracle-oval логотип
ELSA-2025-4229

ELSA-2025-4229: thunderbird security update (IMPORTANT)

около 2 месяцев назад

Уязвимостей на страницу