Threats tagged 'ghsa-rg69-33g2-mp48'

Thunderbird versions prior to 128.10.1 and 138.0.1 contain a vulnerability where the email client parses the From header improperly, allowing sender spoofing if the mail server permits invalid From addresses. Specifically, malformed From headers with multiple addresses can cause Thunderbird to display a spoofed sender address. This vulnerability has been fixed in Thunderbird 128.10.1 and 138.0.1.