Directory Traversal Vulnerability in Thunderbird Email Client by Mozilla

CVE-2025-2830

What is CVE-2025-2830?

A security vulnerability exists in the Thunderbird email client where specially crafted file names in multipart messages can lead to exposure of the directory listing from the /tmp folder when the message is forwarded or edited. This vulnerability affects multiple operating systems, including Linux and Windows, allowing attackers to potentially disclose sensitive information from the user's system. The flaw impacts affected versions prior to 137.0.2 and 128.9.2, and users are encouraged to update to secure versions promptly.

References