CVE-2025-2830: Information Disclosure of /tmp directory listing
By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim's system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 137.0.2 - Upgrade
Upgrade
ubuntu/thunderbirdto a version that resolves this vulnerability.Fixed in 1:128.12.0+build1-0ubuntu0.22.04.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 128.9.2 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.6.0esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 128.9.2
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-2830?
CVE-2025-2830 is classified as a high-severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2025-2830?
To mitigate CVE-2025-2830, update Thunderbird to version 137.0.3 or later.
What does CVE-2025-2830 affect?
CVE-2025-2830 affects Mozilla Thunderbird versions 137.0.2 and earlier as well as 128.9.2 and earlier.
How does CVE-2025-2830 work?
CVE-2025-2830 allows attackers to include a directory listing of the /tmp directory by crafting malformed file names in attachments.
Can CVE-2025-2830 be exploited remotely?
Yes, CVE-2025-2830 can be exploited remotely through manipulated multipart messages.