PT-2020-16799 · Mozilla+4 · Thunderbird+4

Published 2020-11-24 · Updated 2025-08-12 · CVE-2020-27748

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions xdg-utils versions 1.1.0-rc1 and newer

Description A flaw was found in the xdg-email component. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure.

Recommendations For xdg-utils versions 1.1.0-rc1 and newer, consider disabling the handling of mailto: URIs in the xdg-email component until a patch is available. Restrict access to sensitive files to minimize the risk of exploitation. Avoid using the xdg-email component to handle mailto: URIs that may include attachments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-201

Related Identifiers

AZL-37062

AZL-7424

CVE-2020-27748

ECHO-1B2E-BA53-A2B7

MGASA-2020-0446

OESA-2021-1228

ROSA-SA-2024-2444

USN-4649-1

USN-4649-2

Affected Products

Debian

Linuxmint

Thunderbird

Ubuntu

Xdg-Utils

References · 23

• 🔥 https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/177 · Exploit
• https://ubuntu.com/security/notices/USN-4649-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27748 · Security Note
• https://osv.dev/vulnerability/MGASA-2020-0446 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27748 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7424 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4649-2 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2020-27748 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0446.html · Security Note
• https://cve.org/CVERecord?id=CVE-2020-27748 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-27748 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27748 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4649-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-27748 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1228 · Vendor Advisory