VULNERABILITY INTELLIGENCE

CVE-2008-4068

CVSS score7.8 HIGH
EPSS probability4.17%
CISA KEVNot currently listed
Published2008-09-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to bypass "restrictions imposed on local HTML files," and obtain sensitive information and prompt users to write this information into a file, via directory traversal sequences in a resource: URI.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references