CVE-2025-2830
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-2830
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-2830.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-2830
- Downstream
- Related
- Published
- 2025-04-15T15:16:08Z
- Modified
- 2025-08-09T20:01:26Z
- Summary
- [none]
- Details
-
By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim's system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.
- References