Threats tagged 'ghsa-x88m-7whj-m9mh'

Thunderbird versions prior to 159 and 153.6 had a vulnerability where the homeserver address provided in the Matrix login response was not validated. A malicious or compromised homeserver could supply a file: URL, causing Thunderbird to redirect Matrix requests to local files or, on Windows, to an attacker-controlled network share, potentially leaking the user's NTLM credentials. This NTLM credential leak affects only Thunderbird on Windows. The issue was fixed in Thunderbird 159 and 153.6.