Lucene search

MozillaCVELIST:CVE-2022-1520

HistoryDec 22, 2022 - 12:00 a.m.

CVE-2022-1520

2022-12-2200:00:00

mozilla

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.6%

JSON

When viewing an email message A, which contains an attached message B, where B is encrypted or digitally signed or both, Thunderbird may show an incorrect encryption or signature status. After opening and viewing the attached message B, when returning to the display of message A, the message A might be shown with the security status of message B. This vulnerability affects Thunderbird < 91.9.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Thunderbird",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "91.9",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

bugzilla.mozilla.org/show_bug.cgi?id=1745019

www.mozilla.org/security/advisories/mfsa2022-18/