CVE-2023-50762

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Dec 19, 2023
Updated: Dec 29, 2023

Summary

CVE-2023-50762 is a vulnerability that affects Thunderbird versions prior to 115.6. When processing a PGP/MIME payload with digitally signed text, the first paragraph of the text is not displayed to the user. This occurs because the text is interpreted as a MIME message and treated as an email header section. The vulnerability allows attackers to spoof an email message using a digitally signed text from a different context, such as a signed GIT commit. The risk score for this vulnerability is 15 out of 100, indicating a medium severity level. No privileges are required for exploitation, but user interaction is necessary. The attack vector is through network access and the potential impact includes low integrity and no confidentiality or availability impact.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-50762 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options