description: The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to command injection if pasted into a Powershell prompt.<br>*This bug only affects Thunderbird for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
problem types: The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 96, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
