CVE-2022-31739

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% or %APPDATA%.<br>*This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-31747.5Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.CVE-2022-317408.8On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitCVE-2022-317418.8A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. TCVE-2022-317426.5An attacker could have exploited a timing attack by sending a large number of allowCredential entries and detecting the difference between iCVE-2022-317436.5Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers. This could have been uCVE-2022-317446.5An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's ContenCVE-2022-317454.3If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects FirefCVE-2022-317466.5Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header. This vulnerability aCVE-2022-317479.8Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 andCVE-2022-317489.8Mozilla developers Gabriele Svelto, Timothy Nikkel, Randell Jesup, Jon Coppeard, and the Mozilla Fuzzing Team reported memory safety bugs prCVE-2022-317496.5An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allCVE-2022-31755.3Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.