Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-29545
HistoryJun 19, 2023 - 11:15 a.m.

Code injection

2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
firefox
thunderbird
windows
vulnerability
environment variable
cve-2023-28163
nvd
specific versions

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

Similar to CVE-2023-28163, this time when choosing โ€˜Save Link Asโ€™, suggested filenames containing environment variable names would have resolved those in the context of the current user.

This bug only affects Firefox andย Thunderbird on Windows. Other versions of Firefox andย Thunderbird are unaffected. This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.