CVE-2022-4055

Name of the Vulnerable Software and Affected Versions xdg-mail (affected versions not specified)

Description The issue arises when xdg-mail is configured to use thunderbird for mailto URLs, leading to improper parsing of the URL. This can result in additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can exploit this by creating a mailto URL that appears safe but will actually attach files when clicked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.