Unsanitized address book fields
Published Feb 4, 2025
5.4
MEDIUMCVSS 3.1
EPSS 1.37%
Description
The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.
Affected products
No data.
- ≥ 128.0.1 · < 128.7.0
No data.
Red Hat Enterprise Linux 8
thunderbird-0:128.7.0-1.el8_10
Fixed · RHSA-2025:1292
Red Hat Enterprise Linux 8.2 Advanced Update Support
thunderbird-0:128.7.0-1.el8_2
Fixed · RHSA-2025:1348
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.8 Extended Update Support
thunderbird-0:128.7.0-1.el8_8
Fixed · RHSA-2025:1340
Red Hat Enterprise Linux 9
thunderbird-0:128.7.0-1.el9_5
Fixed · RHSA-2025:1184
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el9_0
Fixed · RHSA-2025:1319
Red Hat Enterprise Linux 9.2 Extended Update Support
thunderbird-0:128.7.0-1.el9_2
Fixed · RHSA-2025:1317
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:128.7.0-1.el9_4
Fixed · RHSA-2025:1318
Red Hat Enterprise Linux 10
thunderbird
Affected
Red Hat Enterprise Linux 10
thunderbird-flatpak-container
Affected
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
Red Hat Enterprise Linux 9
thunderbird-flatpak-container
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | thunderbird-0:128.7.0-1.el8_10 | Fixed | RHSA-2025:1292 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | thunderbird-0:128.7.0-1.el8_2 | Fixed | RHSA-2025:1348 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | thunderbird-0:128.7.0-1.el8_8 | Fixed | RHSA-2025:1340 |
| Red Hat Enterprise Linux 9 | thunderbird-0:128.7.0-1.el9_5 | Fixed | RHSA-2025:1184 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el9_0 | Fixed | RHSA-2025:1319 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | thunderbird-0:128.7.0-1.el9_2 | Fixed | RHSA-2025:1317 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:128.7.0-1.el9_4 | Fixed | RHSA-2025:1318 |
| Red Hat Enterprise Linux 10 | thunderbird | Affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 9 | thunderbird-flatpak-container | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Feb 6, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2025–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (32 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 1.37% (0.01370) | 70.96th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.28% (0.01276) | 66.05th | v5 (v2026.06.15) |
| Jun 7, 2026 | 30.87% (0.30868) | 96.83th | v4 (v2025.03.14) |
| May 31, 2026 | 29.28% (0.29275) | 96.68th | v4 (v2025.03.14) |
| Apr 19, 2026 | 23.77% (0.23769) | 96.02th | v4 (v2025.03.14) |
| Mar 15, 2026 | 25.19% (0.25193) | 96.09th | v4 (v2025.03.14) |
| Jan 15, 2026 | 30.60% (0.30600) | 96.57th | v4 (v2025.03.14) |
| Dec 21, 2025 | 29.01% (0.29013) | 96.40th | v4 (v2025.03.14) |
| Dec 1, 2025 | 30.60% (0.30600) | 96.55th | v4 (v2025.03.14) |
| Nov 21, 2025 | 29.53% (0.29525) | 96.41th | v4 (v2025.03.14) |
| Nov 18, 2025 | 40.17% (0.40166) | 97.17th | v4 (v2025.03.14) |
| Oct 31, 2025 | 29.53% (0.29525) | 96.38th | v4 (v2025.03.14) |
| Oct 21, 2025 | 27.51% (0.27511) | 96.17th | v4 (v2025.03.14) |
| Sep 16, 2025 | 20.20% (0.20198) | 95.31th | v4 (v2025.03.14) |
| Sep 11, 2025 | 18.97% (0.18967) | 95.09th | v4 (v2025.03.14) |
| Sep 10, 2025 | 20.20% (0.20198) | 95.30th | v4 (v2025.03.14) |
| Jul 26, 2025 | 18.52% (0.18516) | 94.95th | v4 (v2025.03.14) |
| Jul 23, 2025 | 19.75% (0.19752) | 95.17th | v4 (v2025.03.14) |
| Jul 4, 2025 | 18.52% (0.18516) | 94.95th | v4 (v2025.03.14) |
| Jul 3, 2025 | 17.03% (0.17029) | 94.71th | v4 (v2025.03.14) |
| Jun 6, 2025 | 29.14% (0.29141) | 96.30th | v4 (v2025.03.14) |
| Apr 22, 2025 | 22.79% (0.22792) | 95.49th | v4 (v2025.03.14) |
| Apr 15, 2025 | 18.29% (0.18294) | 94.79th | v4 (v2025.03.14) |
| Apr 13, 2025 | 15.37% (0.15371) | 94.09th | v4 (v2025.03.14) |
| Mar 30, 2025 | 13.67% (0.13668) | 93.64th | v4 (v2025.03.14) |
| Mar 29, 2025 | 25.61% (0.25614) | 93.93th | v4 (v2025.03.14) |
| Mar 28, 2025 | 13.67% (0.13668) | 93.65th | v4 (v2025.03.14) |
| Mar 27, 2025 | 35.79% (0.35786) | 96.54th | v4 (v2025.03.14) |
| Mar 23, 2025 | 17.35% (0.17352) | 94.23th | v4 (v2025.03.14) |
| Mar 20, 2025 | 8.69% (0.08687) | 91.75th | v4 (v2025.03.14) |
| Mar 17, 2025 | 17.35% (0.17352) | 94.54th | v4 (v2025.03.14) |
| Feb 5, 2025 | 0.04% (0.00043) | 11.49th | v3 (v2023.03.01) |
References (7)
- https://access.redhat.com/security/cve/CVE-2025-1015 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1939458 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2343759 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2025-1015
- https://www.cve.org/CVERecord?id=CVE-2025-1015
- https://www.mozilla.org/security/advisories/mfsa2025-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-11/
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2025-1015 | Vendor Advisory | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1939458 | Permissions Required | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2343759 | Issue Tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2025-1015 | ||
| https://www.cve.org/CVERecord?id=CVE-2025-1015 | ||
| https://www.mozilla.org/security/advisories/mfsa2025-10/ | Vendor Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2025-11/ |
Change history (0)
No recorded changes yet.