CVE-2025-0510

Address of e-mail sender can be spoofed by malicious email

Medium · published February 4, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Published
2025-02-04T13:58Z
EPSS history
Timeline
  • 04 FEB 13:58Z
    Address of e-mail sender can be spoofed by malicious email
    cvelistv5