UBUNTU-CVE-2025-3522

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-3522

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-3522.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-3522

Related

CVE-2025-3522

Published

2025-04-15T15:16:00Z

Modified

2025-05-07T16:35:52Z

Summary

[none]

Details

Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validated or sanitized, it can reference internal resources like chrome:// or SMB share file:// links, potentially leading to hashed Windows credential leakage and opening the door to more serious security issues. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2.

References

Affected packages

Ubuntu:20.04:LTS / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:68.*

1:68.1.2+build1-0ubuntu1

1:68.1.2+build1-0ubuntu2

1:68.2.1+build1-0ubuntu1

1:68.2.2+build1-0ubuntu1

1:68.3.0+build2-0ubuntu1

1:68.3.1+build1-0ubuntu2

1:68.4.1+build1-0ubuntu1

1:68.4.2+build2-0ubuntu1

1:68.5.0+build1-0ubuntu1

1:68.6.0+build2-0ubuntu1

1:68.7.0+build1-0ubuntu1

1:68.7.0+build1-0ubuntu2

1:68.8.0+build2-0ubuntu0.20.04.2

1:68.10.0+build1-0ubuntu0.20.04.1

1:78.*

1:78.7.1+build1-0ubuntu0.20.04.1

1:78.8.1+build1-0ubuntu0.20.04.1

1:78.11.0+build1-0ubuntu0.20.04.2

1:78.13.0+build1-0ubuntu0.20.04.2

1:78.14.0+build1-0ubuntu0.20.04.1

1:78.14.0+build1-0ubuntu0.20.04.2

1:91.*

1:91.5.0+build1-0ubuntu0.20.04.1

1:91.7.0+build2-0ubuntu0.20.04.1

1:91.8.1+build1-0ubuntu0.20.04.1

1:91.9.1+build1-0ubuntu0.20.04.1

1:91.11.0+build2-0ubuntu0.20.04.1

1:102.*

1:102.2.2+build1-0ubuntu0.20.04.1

1:102.4.2+build2-0ubuntu0.20.04.1

1:102.7.1+build2-0ubuntu0.20.04.1

1:102.8.0+build2-0ubuntu0.20.04.1

1:102.9.0+build1-0ubuntu0.20.04.1

1:102.10.0+build2-0ubuntu0.20.04.1

1:102.11.0+build1-0ubuntu0.20.04.1

1:102.13.0+build1-0ubuntu0.20.04.1

1:102.15.0+build1-0ubuntu0.20.04.1

1:102.15.1+build1-0ubuntu0.20.04.1

1:115.*

1:115.3.1+build1-0ubuntu0.20.04.1

1:115.4.1+build1-0ubuntu0.20.04.1

1:115.5.0+build1-0ubuntu0.20.04.1

1:115.6.0+build2-0ubuntu0.20.04.1

1:115.8.1+build1-0ubuntu0.20.04.1

1:115.9.0+build1-0ubuntu0.20.04.1

1:115.10.1+build1-0ubuntu0.20.04.1

1:115.11.0+build2-0ubuntu0.20.04.1

1:115.12.0+build3-0ubuntu0.20.04.1

1:115.13.0+build5-0ubuntu0.20.04.1

1:115.15.0+build1-0ubuntu0.20.04.1

1:115.16.0+build2-0ubuntu0.20.04.1

1:115.18.0+build1-0ubuntu0.20.04.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.22.04.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:91.*

1:91.1.2+build1-0ubuntu1

1:91.3.0+build2-0ubuntu1

1:91.3.1+build1-0ubuntu1

1:91.3.2+build1-0ubuntu1

1:91.4.0+build1.1-0ubuntu1

1:91.4.0+build2-0ubuntu1

1:91.5.0+build1-0ubuntu1

1:91.5.1+build1-0ubuntu1

1:91.6.1+build1-0ubuntu1

1:91.7.0+build1-0ubuntu1

1:91.7.0+build2-0ubuntu1

1:91.8.0+build2-0ubuntu1

1:91.9.1+build1-0ubuntu0.22.04.1

1:91.11.0+build2-0ubuntu0.22.04.1

1:102.*

1:102.2.2+build1-0ubuntu0.22.04.1

1:102.4.2+build2-0ubuntu0.22.04.1

1:102.7.1+build2-0ubuntu0.22.04.1

1:102.8.0+build2-0ubuntu0.22.04.1

1:102.9.0+build1-0ubuntu0.22.04.1

1:102.10.0+build2-0ubuntu0.22.04.1

1:102.11.0+build1-0ubuntu0.22.04.1

1:102.13.0+build1-0ubuntu0.22.04.1

1:102.15.0+build1-0ubuntu0.22.04.1

1:102.15.1+build1-0ubuntu0.22.04.1

1:115.*

1:115.3.1+build1-0ubuntu0.22.04.2

1:115.4.1+build1-0ubuntu0.22.04.1

1:115.5.0+build1-0ubuntu0.22.04.1

1:115.6.0+build2-0ubuntu0.22.04.1

1:115.8.1+build1-0ubuntu0.22.04.1

1:115.9.0+build1-0ubuntu0.22.04.1

1:115.10.1+build1-0ubuntu0.22.04.1

1:115.11.0+build2-0ubuntu0.22.04.1

1:115.12.0+build3-0ubuntu0.22.04.1

1:115.13.0+build5-0ubuntu0.22.04.1

1:115.15.0+build1-0ubuntu0.22.04.1

1:115.16.0+build2-0ubuntu0.22.04.1

1:115.18.0+build1-0ubuntu0.22.04.1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}