CVE-2023-50761

2023-12-1913:38:35

mozilla

www.cve.org

s/mime

email signature

thunderbird

validation

vulnerability

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compare the signature creation date with the message date and time, and displayed a valid signature despite a date or time mismatch. This could be used to give recipients the impression that a message was sent at a different date or time. This vulnerability affects Thunderbird < 115.6.

CNA Affected

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "115.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]