Total vulnerabilities in the database
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
| Software | From | Fixed in |
|---|---|---|
| mozilla / thunderbird | - | 102.10 |
| mozilla / focus | - | 112.0 |
| mozilla / firefox_esr | - | 102.10 |
| mozilla / firefox | - | 112.0 |