跳转到帖子

MFSA2025-04 Thunderbird: Security Vulnerabilities fixed in Thunderbird 134 (CVE-2024-50336)

recommended_posts

发布于
  • Members

MFSA2025-04 Thunderbird: Security Vulnerabilities fixed in Thunderbird 134 (CVE-2024-50336)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
11/12/2024
Created
12/13/2024
Added
12/12/2024
Modified
02/14/2025

Description

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the client's homeserver. Fixed in matrix-js-sdk 34.11.1.

Solution(s)

  • mozilla-thunderbird-upgrade-134_0

References

  • https://attackerkb.com/topics/cve-2024-50336
  • CVE - 2024-50336
  • http://www.mozilla.org/security/announce/2025/mfsa2025-04.html
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…