216.73.217.139

CVE-2025-3522

· Published 15/04/2025 15:16 · Modified 15/04/2025 19:16

Labels: CVE-2025-3522 2025-04-15CVE-2025-3522CWE-601[email protected]

Essential information

Published
15/04/2025 15:16
Modified
15/04/2025 19:16
Author
Creator
CVSS
6.3 MEDIUM (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CVSS metrics

Description

Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validated or sanitized, it can reference internal resources like chrome:// or SMB share file:// links, potentially leading to hashed Windows credential leakage and opening the door to more serious security issues. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
mozilla / thunderbird cpe:2.3:a:mozilla:thunderbird:<137.0.2:*:*:*:*:*:*:*
mozilla / thunderbird cpe:2.3:a:mozilla:thunderbird:<128.9.2:*:*:*:*:*:*:*

References