CVE-2017-7847

—

CVSS 3.0

4.3 medium

EPSS

2%p75

Published

Jun 11, 2018 (Jun 11, 2018)

Modified

Jun 17, 2026

Description

Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.

Vendors: debian redhat mozilla
Products: debian linux, enterprise linux aus, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux workstation, thunderbird
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news1 stories

Mozilla patches five issues in Thunderbird, including a critical flaw

Security AffairsDec 27, 10:34 UTC · Dec 27, 2017Vulnerability CVE-2017-7845 CVE-2017-7846 CVE-2017-7847+2 CVEs

60