CVE-2023-0547
Medium
Description
OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug. This vulnerability affects Thunderbird < 102.10.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Mozilla Thunderbird
PublishedJun 2, 2023
First seenJun 2, 2023
Weakness typeCWE-295CWE-295
How to fix
Update
- mozilla thunderbird102.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla thunderbird | 68.0 ≤ v < 102.10 | 102.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.