Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2023-4581
HistorySep 11, 2023 - 8:01 a.m.

CVE-2023-4581

2023-09-1108:01:45
mozilla
github.com
excel add-in
firefox
thunderbird
vulnerability
executable blocklist
firefox < 117
firefox esr < 102.15
firefox esr < 115.2
thunderbird < 102.15
thunderbird < 115.2

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Excel .xll add-in files did not have a blocklist entry in Firefox’s executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.