PT-2022-1402 · Mozilla+3 · Thunderbird+5
Mattias Jacobsson
·
Published
2022-01-11
·
Updated
2024-12-12
·
CVE-2022-22744
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firefox ESR versions prior to 91.5
Firefox versions prior to 96
Thunderbird versions prior to 91.5
Description
The issue arises from the "Copy as curl" feature in DevTools, where the constructed curl command is not properly escaped for PowerShell, potentially leading to command injection if pasted into a PowerShell prompt. This could allow a remote attacker to execute arbitrary commands in the system if the copied data is inserted into the PowerShell command line. The bug specifically affects Thunderbird for Windows, with other operating systems being unaffected.
Recommendations
For Firefox ESR versions prior to 91.5, update to version 91.5 or later.
For Firefox versions prior to 96, update to version 96 or later.
For Thunderbird versions prior to 91.5, update to version 91.5 or later.
As a temporary workaround, consider avoiding the use of the "Copy as curl" feature in DevTools for these versions until a patch is applied.
Exploit
Fix
Improper Encoding or Escaping of Output
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Firefox
Firefox Esr
Red Os
Suse
Thunderbird