tocsin

Debian/thunderbird: medium 6.5

An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. This vulnerability affects Firefox ESR <

Action: Upgrade thunderbird to 1:91.11.0-1 or later.

Affected

introducedfixedlast affected
01:91.11.0-1-

Fixed versions

1:91.11.0-1

Sources

published · modified · JSON