CVE-2017-5414

The file picker dialog can choose and display the wrong local default directory when instantiated

published June 11, 2018

CVSS
—
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to information disclosure, such as the operating system or the local account name. This vulnerability affects Firefox < 52 and Thunderbird < 52.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.1th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    The file picker dialog can choose and display the wrong local default directory when instantiated
    cvelistv5