CVE-2025-3522

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-3522

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3522.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3522

Related

UBUNTU-CVE-2025-3522

Published

2025-04-15T15:16:09Z

Modified

2025-04-15T20:42:53.489042Z

Summary

[none]

Details

Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validated or sanitized, it can reference internal resources like chrome:// or SMB share file:// links, potentially leading to hashed Windows credential leakage and opening the door to more serious security issues. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

References

Affected packages

Debian:11 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:78.*

1:78.12.0-1

1:78.13.0-1~deb9u1

1:78.13.0-1~deb10u1

1:78.13.0-1~deb11u1

1:78.13.0-1

1:78.14.0-1~deb9u1

1:78.14.0-1~deb10u1

1:78.14.0-1~deb11u1

1:78.14.0-1

1:84.*

1:84.0~b3-1

1:85.*

1:85.0~b3-1

1:86.*

1:86.0~b3-1

1:88.*

1:88.0~b2-1

1:89.*

1:89.0~b2-1

1:90.*

1:90.0~b2-1

1:91.*

1:91.0~b1-1

1:91.0~b3-1

1:91.0~b5-1

1:91.0-1

1:91.0.2-1

1:91.1.0-1

1:91.1.1-1

1:91.2.0-1

1:91.2.1-1

1:91.3.0-1

1:91.3.2-1

1:91.4.0-1

1:91.4.1-1~deb9u1

1:91.4.1-1~deb10u1

1:91.4.1-1~deb11u1

1:91.4.1-1

1:91.5.0-1~deb9u1

1:91.5.0-1

1:91.5.0-2~deb10u1

1:91.5.0-2~deb11u1

1:91.5.0-2

1:91.5.1-1

1:91.6.0-1~deb9u1

1:91.6.0-1~deb10u1

1:91.6.0-1~deb11u1

1:91.6.0-1

1:91.6.1-1~deb9u1

1:91.6.1-1~deb10u1

1:91.6.1-1~deb11u1

1:91.6.1-1

1:91.6.2-1~deb9u1

1:91.6.2-1~deb10u1

1:91.6.2-1~deb11u1

1:91.6.2-1

1:91.7.0-1

1:91.7.0-2~deb9u1

1:91.7.0-2~deb10u1

1:91.7.0-2~deb11u1

1:91.7.0-2

1:91.8.0-1~deb9u1

1:91.8.0-1~deb10u1

1:91.8.0-1~deb11u1

1:91.8.0-1

1:91.8.1-1

1:91.9.0-1~deb9u1

1:91.9.0-1~deb10u1

1:91.9.0-1~deb11u1

1:91.9.0-1

1:91.10.0-1~deb9u1

1:91.10.0-1~deb10u1

1:91.10.0-1~deb11u1

1:91.10.0-1

1:91.11.0-1~deb10u1

1:91.11.0-1~deb11u1

1:91.11.0-1

1:91.12.0-1~deb10u1

1:91.12.0-1~deb11u1

1:91.13.0-1~deb10u1

1:91.13.0-1~deb11u1

1:102.*

1:102.0~b4-1

1:102.0~b7-1

1:102.0.1-1

1:102.0.2-1

1:102.1.0-1

1:102.1.1-1

1:102.1.2-1

1:102.2.0-1

1:102.2.1-1

1:102.2.2-1

1:102.3.0-1~deb10u1

1:102.3.0-1~deb11u1

1:102.3.0-1

1:102.3.1-1

1:102.3.2-1

1:102.3.3-1

1:102.4.0-1~deb10u1

1:102.4.0-1~deb11u1

1:102.4.0-1

1:102.4.1-1

1:102.5.0-1~deb10u1

1:102.5.0-1~deb11u1

1:102.5.0-1

1:102.5.1-1

1:102.6.0-1~deb10u1

1:102.6.0-1~deb11u1

1:102.6.0-1

1:102.7.1-1

1:102.7.1+1-1

1:102.7.2-1

1:102.8.0-1~deb10u1

1:102.8.0-1~deb11u1

1:102.8.0-1

1:102.9.0-1~deb10u1

1:102.9.0-1~deb11u1

1:102.9.0-1

1:102.9.1-1

1:102.10.0-1~deb10u1

1:102.10.0-1~deb11u1

1:102.10.0-1

1:102.11.0-1~deb10u1

1:102.11.0-1~deb11u1

1:102.11.0-1

1:102.12.0-1~deb10u1

1:102.12.0-1~deb11u1

1:102.12.0-1~deb12u1

1:102.12.0-1

1:102.13.0-1~deb10u1

1:102.13.0-1~deb11u1

1:102.13.0-1~deb12u1

1:102.13.0-1

1:102.13.1-1~deb10u1

1:102.13.1-1~deb11u1

1:102.13.1-1~deb12u1

1:102.13.1-1

1:102.14.0-1~deb10u1

1:102.14.0-1~deb11u1

1:102.14.0-1~deb12u1

1:102.15.0-1~deb10u1

1:102.15.0-1~deb11u1

1:102.15.0-1~deb12u1

1:102.15.1-1~deb10u1

1:102.15.1-1~deb11u1

1:102.15.1-1~deb12u1

1:103.*

1:103.0~b5-1

1:104.*

1:104.0~b2-1

1:110.*

1:110.0~b4-1

1:112.*

1:112.0~b1-1

1:113.*

1:113.0~b3-1

1:114.*

1:114.0~b2-1

1:115.*

1:115.0~b4-1

1:115.0~b6-1

1:115.0-1

1:115.0.1-1

1:115.0.1-2

1:115.1.0-1

1:115.1.1-1

1:115.2.0-1

1:115.2.2-1

1:115.3.0-1~deb12u1

1:115.3.0-1

1:115.3.1-1~deb10u1

1:115.3.1-1~deb11u1

1:115.3.1-1~deb12u1

1:115.3.1-1

1:115.4.1-1~deb10u1

1:115.4.1-1~deb11u1

1:115.4.1-1~deb12u1

1:115.4.1-1

1:115.5.0-1~deb10u1

1:115.5.0-1~deb11u1

1:115.5.0-1~deb12u1

1:115.5.0-1

1:115.5.1-1

1:115.5.2-1

1:115.6.0-1~deb10u1

1:115.6.0-1~deb11u1

1:115.6.0-1~deb12u1

1:115.6.0-1

1:115.7.0-1~deb10u1

1:115.7.0-1~deb11u1

1:115.7.0-1~deb12u1

1:115.7.0-1

1:115.8.0-1~deb10u1

1:115.8.0-1~deb11u1

1:115.8.0-1~deb12u1

1:115.8.0-1

1:115.8.1-1

1:115.9.0-1~deb10u1

1:115.9.0-1~deb11u1

1:115.9.0-1~deb12u1

1:115.9.0-1

1:115.10.1-1~deb10u1

1:115.10.1-1~deb11u1

1:115.10.1-1~deb12u1

1:115.10.1-1

1:115.11.0-1~deb10u1

1:115.11.0-1~deb11u1

1:115.11.0-1~deb12u1

1:115.11.0-1

1:115.12.0-1~deb10u1

1:115.12.0-1~deb11u1

1:115.12.0-1~deb12u1

1:115.12.0-1

1:115.13.0-1~deb11u1

1:115.13.0-1~deb12u1

1:115.13.0-1

1:115.14.0-1~deb11u1

1:115.14.0-1~deb12u1

1:115.15.0-1~deb11u1

1:115.15.0-1~deb12u1

1:115.16.0esr-1~deb11u1

1:115.16.0esr-1~deb12u1

1:116.*

1:116.0~b7-1

1:117.*

1:117.0~b5-1

1:120.*

1:120.0~b1-1

1:121.*

1:121.0~b3-1

1:122.*

1:122.0~b2-1

1:124.*

1:124.0~b5-1

1:125.*

1:125.0~b3-1

1:127.*

1:127.0~b5-1

1:128.*

1:128.0~b5-1

1:128.0esr-1

1:128.1.0esr-1

1:128.1.1esr-1

1:128.2.0esr-1

1:128.2.1esr-1

1:128.2.3esr-1

1:128.3.0esr-1

1:128.3.2esr-1

1:128.4.0esr-1~deb11u1

1:128.4.0esr-1~deb12u1

1:128.4.0esr-1

1:128.4.2esr-1

1:128.4.3esr-1~deb11u1

1:128.4.3esr-1~deb12u1

1:128.4.3esr-1

1:128.5.0esr-1~deb11u1

1:128.5.0esr-1~deb12u1

1:128.5.0esr-1

1:128.5.2esr-1

1:128.6.0esr-1~deb11u1

1:128.6.0esr-1~deb12u1

1:128.6.0esr-1

1:128.7.0esr-1~deb11u1

1:128.7.0esr-1~deb12u1

1:128.7.0esr-1

1:128.8.0esr-1~deb11u1

1:128.8.0esr-1~deb12u1

1:128.8.0esr-1

1:128.9.0esr-1~deb11u1

1:128.9.0esr-1~deb12u1

1:128.9.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:102.*

1:102.11.0-1

1:102.12.0-1~deb10u1

1:102.12.0-1~deb11u1

1:102.12.0-1~deb12u1

1:102.12.0-1

1:102.13.0-1~deb10u1

1:102.13.0-1~deb11u1

1:102.13.0-1~deb12u1

1:102.13.0-1

1:102.13.1-1~deb10u1

1:102.13.1-1~deb11u1

1:102.13.1-1~deb12u1

1:102.13.1-1

1:102.14.0-1~deb10u1

1:102.14.0-1~deb11u1

1:102.14.0-1~deb12u1

1:102.15.0-1~deb10u1

1:102.15.0-1~deb11u1

1:102.15.0-1~deb12u1

1:102.15.1-1~deb10u1

1:102.15.1-1~deb11u1

1:102.15.1-1~deb12u1

1:103.*

1:103.0~b5-1

1:104.*

1:104.0~b2-1

1:110.*

1:110.0~b4-1

1:112.*

1:112.0~b1-1

1:113.*

1:113.0~b3-1

1:114.*

1:114.0~b2-1

1:115.*

1:115.0~b4-1

1:115.0~b6-1

1:115.0-1

1:115.0.1-1

1:115.0.1-2

1:115.1.0-1

1:115.1.1-1

1:115.2.0-1

1:115.2.2-1

1:115.3.0-1~deb12u1

1:115.3.0-1

1:115.3.1-1~deb10u1

1:115.3.1-1~deb11u1

1:115.3.1-1~deb12u1

1:115.3.1-1

1:115.4.1-1~deb10u1

1:115.4.1-1~deb11u1

1:115.4.1-1~deb12u1

1:115.4.1-1

1:115.5.0-1~deb10u1

1:115.5.0-1~deb11u1

1:115.5.0-1~deb12u1

1:115.5.0-1

1:115.5.1-1

1:115.5.2-1

1:115.6.0-1~deb10u1

1:115.6.0-1~deb11u1

1:115.6.0-1~deb12u1

1:115.6.0-1

1:115.7.0-1~deb10u1

1:115.7.0-1~deb11u1

1:115.7.0-1~deb12u1

1:115.7.0-1

1:115.8.0-1~deb10u1

1:115.8.0-1~deb11u1

1:115.8.0-1~deb12u1

1:115.8.0-1

1:115.8.1-1

1:115.9.0-1~deb10u1

1:115.9.0-1~deb11u1

1:115.9.0-1~deb12u1

1:115.9.0-1

1:115.10.1-1~deb10u1

1:115.10.1-1~deb11u1

1:115.10.1-1~deb12u1

1:115.10.1-1

1:115.11.0-1~deb10u1

1:115.11.0-1~deb11u1

1:115.11.0-1~deb12u1

1:115.11.0-1

1:115.12.0-1~deb10u1

1:115.12.0-1~deb11u1

1:115.12.0-1~deb12u1

1:115.12.0-1

1:115.13.0-1~deb11u1

1:115.13.0-1~deb12u1

1:115.13.0-1

1:115.14.0-1~deb11u1

1:115.14.0-1~deb12u1

1:115.15.0-1~deb11u1

1:115.15.0-1~deb12u1

1:115.16.0esr-1~deb11u1

1:115.16.0esr-1~deb12u1

1:116.*

1:116.0~b7-1

1:117.*

1:117.0~b5-1

1:120.*

1:120.0~b1-1

1:121.*

1:121.0~b3-1

1:122.*

1:122.0~b2-1

1:124.*

1:124.0~b5-1

1:125.*

1:125.0~b3-1

1:127.*

1:127.0~b5-1

1:128.*

1:128.0~b5-1

1:128.0esr-1

1:128.1.0esr-1

1:128.1.1esr-1

1:128.2.0esr-1

1:128.2.1esr-1

1:128.2.3esr-1

1:128.3.0esr-1

1:128.3.2esr-1

1:128.4.0esr-1~deb11u1

1:128.4.0esr-1~deb12u1

1:128.4.0esr-1

1:128.4.2esr-1

1:128.4.3esr-1~deb11u1

1:128.4.3esr-1~deb12u1

1:128.4.3esr-1

1:128.5.0esr-1~deb11u1

1:128.5.0esr-1~deb12u1

1:128.5.0esr-1

1:128.5.2esr-1

1:128.6.0esr-1~deb11u1

1:128.6.0esr-1~deb12u1

1:128.6.0esr-1

1:128.7.0esr-1~deb11u1

1:128.7.0esr-1~deb12u1

1:128.7.0esr-1

1:128.8.0esr-1~deb11u1

1:128.8.0esr-1~deb12u1

1:128.8.0esr-1

1:128.9.0esr-1~deb11u1

1:128.9.0esr-1~deb12u1

1:128.9.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/debian/thunderbird?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:102.*

1:102.11.0-1

1:102.12.0-1~deb10u1

1:102.12.0-1~deb11u1

1:102.12.0-1~deb12u1

1:102.12.0-1

1:102.13.0-1~deb10u1

1:102.13.0-1~deb11u1

1:102.13.0-1~deb12u1

1:102.13.0-1

1:102.13.1-1~deb10u1

1:102.13.1-1~deb11u1

1:102.13.1-1~deb12u1

1:102.13.1-1

1:102.14.0-1~deb10u1

1:102.14.0-1~deb11u1

1:102.14.0-1~deb12u1

1:102.15.0-1~deb10u1

1:102.15.0-1~deb11u1

1:102.15.0-1~deb12u1

1:102.15.1-1~deb10u1

1:102.15.1-1~deb11u1

1:102.15.1-1~deb12u1

1:103.*

1:103.0~b5-1

1:104.*

1:104.0~b2-1

1:110.*

1:110.0~b4-1

1:112.*

1:112.0~b1-1

1:113.*

1:113.0~b3-1

1:114.*

1:114.0~b2-1

1:115.*

1:115.0~b4-1

1:115.0~b6-1

1:115.0-1

1:115.0.1-1

1:115.0.1-2

1:115.1.0-1

1:115.1.1-1

1:115.2.0-1

1:115.2.2-1

1:115.3.0-1~deb12u1

1:115.3.0-1

1:115.3.1-1~deb10u1

1:115.3.1-1~deb11u1

1:115.3.1-1~deb12u1

1:115.3.1-1

1:115.4.1-1~deb10u1

1:115.4.1-1~deb11u1

1:115.4.1-1~deb12u1

1:115.4.1-1

1:115.5.0-1~deb10u1

1:115.5.0-1~deb11u1

1:115.5.0-1~deb12u1

1:115.5.0-1

1:115.5.1-1

1:115.5.2-1

1:115.6.0-1~deb10u1

1:115.6.0-1~deb11u1

1:115.6.0-1~deb12u1

1:115.6.0-1

1:115.7.0-1~deb10u1

1:115.7.0-1~deb11u1

1:115.7.0-1~deb12u1

1:115.7.0-1

1:115.8.0-1~deb10u1

1:115.8.0-1~deb11u1

1:115.8.0-1~deb12u1

1:115.8.0-1

1:115.8.1-1

1:115.9.0-1~deb10u1

1:115.9.0-1~deb11u1

1:115.9.0-1~deb12u1

1:115.9.0-1

1:115.10.1-1~deb10u1

1:115.10.1-1~deb11u1

1:115.10.1-1~deb12u1

1:115.10.1-1

1:115.11.0-1~deb10u1

1:115.11.0-1~deb11u1

1:115.11.0-1~deb12u1

1:115.11.0-1

1:115.12.0-1~deb10u1

1:115.12.0-1~deb11u1

1:115.12.0-1~deb12u1

1:115.12.0-1

1:115.13.0-1~deb11u1

1:115.13.0-1~deb12u1

1:115.13.0-1

1:115.14.0-1~deb11u1

1:115.14.0-1~deb12u1

1:115.15.0-1~deb11u1

1:115.15.0-1~deb12u1

1:115.16.0esr-1~deb11u1

1:115.16.0esr-1~deb12u1

1:116.*

1:116.0~b7-1

1:117.*

1:117.0~b5-1

1:120.*

1:120.0~b1-1

1:121.*

1:121.0~b3-1

1:122.*

1:122.0~b2-1

1:124.*

1:124.0~b5-1

1:125.*

1:125.0~b3-1

1:127.*

1:127.0~b5-1

1:128.*

1:128.0~b5-1

1:128.0esr-1

1:128.1.0esr-1

1:128.1.1esr-1

1:128.2.0esr-1

1:128.2.1esr-1

1:128.2.3esr-1

1:128.3.0esr-1

1:128.3.2esr-1

1:128.4.0esr-1~deb11u1

1:128.4.0esr-1~deb12u1

1:128.4.0esr-1

1:128.4.2esr-1

1:128.4.3esr-1~deb11u1

1:128.4.3esr-1~deb12u1

1:128.4.3esr-1

1:128.5.0esr-1~deb11u1

1:128.5.0esr-1~deb12u1

1:128.5.0esr-1

1:128.5.2esr-1

1:128.6.0esr-1~deb11u1

1:128.6.0esr-1~deb12u1

1:128.6.0esr-1

1:128.7.0esr-1~deb11u1

1:128.7.0esr-1~deb12u1

1:128.7.0esr-1

1:128.8.0esr-1~deb11u1

1:128.8.0esr-1~deb12u1

1:128.8.0esr-1

1:128.9.0esr-1~deb11u1

1:128.9.0esr-1~deb12u1

1:128.9.0esr-1

1:129.*

1:129.0~b6-1

1:130.*

1:130.0~b3-1

1:132.*

1:132.0~b6-1

1:135.*

1:135.0-1

1:136.*

1:136.0-1

1:137.*

1:137.0-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}