CVE-2020-15685

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 78.7

Description: The issue is related to insufficient input validation during the STARTTLS connection setup, specifically in the plaintext phase. This could allow protocol commands to be injected and evaluated within the encrypted session, potentially affecting the confidentiality and integrity of protected information.

Recommendations: For versions prior to 78.7, update to version 78.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the STARTTLS connection setup until a patch is available.