description: During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.
problem types: IMAP Response Injection when using STARTTLS
affected:
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 78.7, status: affected, versionType: custom
}