CVE-2018-5162 — Missing Encryption of Sensitive Data in Mozilla Thunderbird
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMay 13
Description
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages8 packages
Also affects: Debian Linux 7.0, 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, 18.04, Enterprise Linux 7.6, 7.5
🔴Vulnerability Details
3GHSA▶
GHSA-644r-rpv6-w4x6: Plaintext of decrypted emails can leak through the src attribute of remote images, or links↗2022-05-13
CVEList▶
CVE-2018-5162: Plaintext of decrypted emails can leak through the src attribute of remote images, or links↗2018-06-11
OSV▶
CVE-2018-5162: Plaintext of decrypted emails can leak through the src attribute of remote images, or links↗2018-06-11
📋Vendor Advisories
4Red Hat
▶
Debian▶
CVE-2018-5162: thunderbird - Plaintext of decrypted emails can leak through the src attribute of remote image...↗2018