PT-2026-84528
CVE-2026-84642
·
تاريخ النشر
2026-09-01
·
تاريخ التحديث
2026-10-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 153.2
Thunderbird versions prior to 155
Description
The
mail.allowed attachment hostnames advanced configuration setting is used in a regular expression without proper escaping. This flaw allows certain unintended hostnames to match the expression, potentially enabling the serving of remote attachments from unauthorized hosts.Recommendations
Update Thunderbird to version 153.2 or later.
Update Thunderbird to version 155 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾