Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-5170
HistoryJun 11, 2018 - 9:29 p.m.

Design/Logic Flaw

2018-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
6

6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.6%

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.