USN-7193-1: Thunderbird vulnerability
Masato Kinugawa discovered that Thunderbird did not properly validate the CSP policy in the Web Compatibility extension. An attacker could potentially exploit this issue to perform a cross-site scripting attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7193-1?
USN-7193-1 is categorized as a security vulnerability that could allow cross-site scripting attacks.
How do I fix USN-7193-1?
To fix USN-7193-1, update Thunderbird to version 1:115.18.0+build1-0ubuntu0.22.04.1 or later for Ubuntu 22.04 or version 1:115.18.0+build1-0ubuntu0.20.04.1 or later for Ubuntu 20.04.
Which versions of Thunderbird are affected by USN-7193-1?
USN-7193-1 affects Thunderbird versions prior to 1:115.18.0+build1-0ubuntu0.22.04.1 for Ubuntu 22.04 and 1:115.18.0+build1-0ubuntu0.20.04.1 for Ubuntu 20.04.
Who discovered the vulnerability in USN-7193-1?
The vulnerability in USN-7193-1 was discovered by security researcher Masato Kinugawa.
What kind of attack can exploit USN-7193-1?
USN-7193-1 can be exploited to perform cross-site scripting (XSS) attacks.