Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3155
HistoryDec 22, 2022 - 8:15 p.m.

Code injection

2022-12-2220:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
email attachment
macos thunderbird
vulnerability
nvd
application
confirmation

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

CPENameOperatorVersion
thunderbirdlt102.3

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%