| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 137.0 | 137.0 |
| thunderbird | < 137.0 | 137.0 |
After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 137 and Thunderbird 137.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free