Path traversal in Mozilla Firefox and Firefox ESR - CVE-2022-31739

Vulnerability identifier: #VU63875

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-31739

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when saving downloaded files on Windows. A remote attacker can use the "%" character in filename to store data outside the intended directory using Windows environment variables, such as %HOMEPATH% or %APPDATA%.

The vulnerability affects Windows installations only.

Mozilla Firefox
Firefox ESR
Pale Moon
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
Oracle Solaris
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Desktop Applications
openSUSE Leap
SUSE Linux Enterprise Module for Packagehub Subpackages
MozillaFirefox
MozillaFirefox-debuginfo
MozillaFirefox-debugsource
MozillaFirefox-devel
MozillaFirefox-translations-common
MozillaFirefox-translations-other
MozillaThunderbird
MozillaThunderbird-debuginfo
MozillaThunderbird-debugsource
MozillaThunderbird-translations-common
MozillaThunderbird-translations-other
MozillaFirefox-branding-upstream
Mozilla Thunderbird
IBM Cloud Application Performance Management (APM)

Install update from vendor's website.

Mozilla Firefox - update to 101.0
Firefox ESR - update to 91.10.0
Pale Moon - update to 31.1.0
Mozilla Thunderbird - update to 91.10.0
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.16
MozillaFirefox - addressed in versions 91.10.0-112.114.1, 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaFirefox-debuginfo - addressed in versions 91.10.0-112.114.1, 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaFirefox-debugsource - addressed in versions 91.10.0-112.114.1, 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaFirefox-devel - addressed in versions 91.10.0-112.114.1, 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaFirefox-translations-common - addressed in versions 91.10.0-112.114.1, 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaFirefox-translations-other - addressed in versions 91.10.0-150000.150.44.1, 91.10.0-150200.152.43.1
MozillaThunderbird - update to 91.10.0-150200.8.73.1
MozillaThunderbird-debuginfo - update to 91.10.0-150200.8.73.1
MozillaThunderbird-debugsource - update to 91.10.0-150200.8.73.1
MozillaThunderbird-translations-common - update to 91.10.0-150200.8.73.1
MozillaThunderbird-translations-other - update to 91.10.0-150200.8.73.1
MozillaFirefox-branding-upstream - update to 91.10.0-150200.152.43.1

• https://www.mozilla.org/en-US/security/advisories/mfsa2022-20/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-21/

• Multiple vulnerabilities in Mozilla Firefox
• Multiple vulnerabilities in Mozilla Thunderbird
• Slackware Linux update for mozilla-firefox
• Slackware Linux update for mozilla-thunderbird
• SUSE update for MozillaFirefox
• SUSE update for MozillaFirefox
• SUSE update for MozillaFirefox
• SUSE update for MozillaThunderbird
• Multiple vulnerabilities in Oracle Solaris
• Multiple vulnerabilities in Pale Moon
• Multiple vulnerabilities in IBM Application Performance Management