medium6.5
CVE-2023-0430
Certificate OCSP revocation status was not checked when verifying S/Mime signatures.
Impact
Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderbird versions from 68 to 102.7.0 were affected by this bug. This vulnerability affects Thunderbird < 102.7.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Thunderbird | from 68.0 before 102.7.1 |