CVE-2023-29539
Severity
8.8HIGH
EPSS
0.2%
top 55.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 2
Description
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages11 packages
🔴Vulnerability Details
3GHSA▶
GHSA-cw5w-6pfm-w752: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character↗2023-06-02
OSV▶
CVE-2023-29539: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character↗2023-06-02
CVEList▶
CVE-2023-29539: When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character↗2023-06-02
📋Vendor Advisories
7Red Hat
▶
Debian▶
CVE-2023-29539: firefox - When handling the filename directive in the Content-Disposition header, the file...↗2023