vulnerability
MFSA2017-13 Thunderbird: Security vulnerabilities fixed in Thunderbird 52.1 (CVE-2017-5454)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Apr 30, 2017 | May 2, 2017 | Aug 12, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Apr 30, 2017
Added
May 2, 2017
Modified
Aug 12, 2025
Description
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Solution
mozilla-thunderbird-upgrade-52_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.