Beveiligingsadvies

CVE-2023-29545

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-19 10:07:39

Laatst bijgewerkt 2024-12-11 15:54:04

Toegewezen door mozilla

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the context of the current user. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

← Alle CVE's bekijken Bekijk op cve.org ↗