CVE-2023-0430

2023-06-0200:00:00

mozilla

www.cve.org

certificate

ocsp

revocation

s/mime

thunderbird

vulnerability

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird < 102.7.1.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Thunderbird",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "102.7.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]