CVE:CVE-2023-29545
CNNVD:CNNVD-202304-1305
Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。
Mozilla Firefox 112之前版本存在安全漏洞，该漏洞源于选择另存为时，包含环境变量名称的建议文件名会在当前用户的上下文中解析这些文件名。
solution:Upgrade mozilla firefox to a higher version than 112.0,and avoid the version (,112.0); Upgrade mozilla firefox_esr to a higher version than 102.10,and avoid the version (,102.10); Upgrade mozilla thunderbird to a higher version than 102.10,and avoid the version (,102.10)