Lucene search
GoogleOSV:CVE-2020-27748HistoryJun 01, 2021 - 2:15 p.m.
CVE-2020-27748
2021-06-0114:15:08
Google
osv.dev
2
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird.
Related
mageia
mageia
Updated xdg-utils package fixes a security vulnerability
2020-12-03 12:54:38
osv
osv
xdg-utils vulnerability
2020-11-26 13:57:13
ubuntu
ubuntu
xdg-utils vulnerability
2020-11-26 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4649-1)
2020-11-27 00:00:00
Mageia: Security Advisory (MGASA-2020-0446)
2022-01-28 00:00:00
nessus
nessus
RHEL 6 : xdg-utils (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : xdg-utils (Unpatched Vulnerability)
2024-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2020-27748
2020-11-24 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2444
2024-07-01 14:15:34
debiancve
debiancve
CVE-2020-27748
2021-06-01 14:15:08
alpinelinux
alpinelinux
CVE-2020-27748
2021-06-01 14:15:08
redhatcve
redhatcve
CVE-2020-27748
2020-11-20 13:51:30
cvelist
cvelist
CVE-2020-27748
2021-06-01 13:15:11
cve
cve
CVE-2020-27748
2021-06-01 14:15:08
nvd
nvd
CVE-2020-27748
2021-06-01 14:15:08
prion
prion
Information disclosure
2021-06-01 14:15:00
cbl_mariner
cbl_mariner
CVE-2020-27748 affecting package xdg-utils 1.1.3-7
2024-07-05 17:10:17
amazon
amazon
Medium: xdg-utils
2023-03-17 16:35:00