What is the severity of CVE-2025-2830?

CVE-2025-2830 is classified as a high-severity vulnerability due to its potential to disclose sensitive information.

How do I fix CVE-2025-2830?

To mitigate CVE-2025-2830, update Thunderbird to version 137.0.3 or later.

What does CVE-2025-2830 affect?

CVE-2025-2830 affects Mozilla Thunderbird versions 137.0.2 and earlier as well as 128.9.2 and earlier.

How does CVE-2025-2830 work?

CVE-2025-2830 allows attackers to include a directory listing of the /tmp directory by crafting malformed file names in attachments.

Can CVE-2025-2830 be exploited remotely?

Yes, CVE-2025-2830 can be exploited remotely through manipulated multipart messages.

Vulnerability/
CVE-2025-2830

medium

6.3

CWE

15/4/2025

CVE-2025-2830: Path Traversal

First published: Tue Apr 15 2025(Updated: )

By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the victim's system. This vulnerability is not limited to Linux; similar behavior has been observed on Windows as well.

Credit: security@mozilla.org

Affected Software	Affected Version	How to fix
Thunderbird	<137.0.2<128.9.2
Thunderbird	<137.0.2	137.0.2
Thunderbird	<128.9.2	128.9.2

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

What is the severity of CVE-2025-2830?
CVE-2025-2830 is classified as a high-severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2025-2830?
To mitigate CVE-2025-2830, update Thunderbird to version 137.0.3 or later.
What does CVE-2025-2830 affect?
CVE-2025-2830 affects Mozilla Thunderbird versions 137.0.2 and earlier as well as 128.9.2 and earlier.
How does CVE-2025-2830 work?
CVE-2025-2830 allows attackers to include a directory listing of the /tmp directory by crafting malformed file names in attachments.
Can CVE-2025-2830 be exploited remotely?
Yes, CVE-2025-2830 can be exploited remotely through manipulated multipart messages.

collector/mitre-cve
source/MITRE
agent/type
agent/guess-ai
agent/software-canonical-lookup
collector/mozilla-advisory
source/Mozilla
agent/references
agent/description
agent/first-publish-date
agent/softwarecombine
agent/author
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/weakness
agent/last-modified-date
agent/severity
agent/event
vendor/mozilla
canonical/thunderbird

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.