VDB

CISA-2025-0510

CISA-2025-0510 PUBLISHED CVSS 6.5 MEDIUM

Reported by mozilla · Published February 4, 2025

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability affects Thunderbird < 128.7 and Thunderbird < 135.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
MozillaThunderbirdunspecified
MozillaThunderbirdunspecified
MozillaThunderbirdunspecified, unspecified, unspecified

Timeline

  • Feb 4, 2025 CVE Published
  • Feb 6, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›