CVE-2023-0547

2023-06-0200:00:00

mozilla

www.cve.org

ocsp

revocation status

s/mime

encrypted email

thunderbird

vulnerability

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Thunderbird",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "102.10",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]