{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Windows Save As dialog resolved environment variables",
    "tracking": {
      "current_release_date": "2026-08-11T16:53:12+00:00",
      "generator": {
        "date": "2026-08-11T16:53:12+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2023-28163",
      "initial_release_date": "2023-03-14T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T16:53:12+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.10.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.10.z",
              "product_id": "rhel-8.10.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.2.0.z",
              "product_id": "rhel-8.2.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.4.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.4.0.z",
              "product_id": "rhel-8.4.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.6.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.6.0.z",
              "product_id": "rhel-8.6.0.z.aus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_aus:8.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 8.8.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 8.8.0.z",
              "product_id": "rhel-8.8.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:8.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.0.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.0.0.z",
              "product_id": "rhel-9.0.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.0"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.2.0.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.2.0.z",
              "product_id": "rhel-9.2.0.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.4.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.4.z",
              "product_id": "rhel-9.4.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.4"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.6.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.6.z",
              "product_id": "rhel-9.6.z.eus",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhel_eus:9.6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7",
              "product_id": "rhel-9.7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.7.z",
            "product": {
              "name": "Red Hat Enterprise Linux 9.7.z",
              "product_id": "rhel-9.7.z",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 9.8",
            "product": {
              "name": "Red Hat Enterprise Linux 9.8",
              "product_id": "rhel-9.8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:enterprise_linux:9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debuginfo",
            "product": {
              "name": "firefox-debuginfo",
              "product_id": "firefox-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debugsource",
            "product": {
              "name": "firefox-debugsource",
              "product_id": "firefox-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-x11",
            "product": {
              "name": "firefox-x11",
              "product_id": "firefox-x11",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-x11"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird-debuginfo",
            "product": {
              "name": "thunderbird-debuginfo",
              "product_id": "thunderbird-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird-debugsource",
            "product": {
              "name": "thunderbird-debugsource",
              "product_id": "thunderbird-debugsource",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird-debugsource"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox-debugsource"
        },
        "product_reference": "firefox-debugsource",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11 as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox-x11"
        },
        "product_reference": "firefox-x11",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:thunderbird-debuginfo"
        },
        "product_reference": "thunderbird-debuginfo",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debugsource as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:thunderbird-debugsource"
        },
        "product_reference": "thunderbird-debugsource",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.4.0.z",
          "product_id": "rhel-8.4.0.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-8.4.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.8.0.z",
          "product_id": "rhel-8.8.0.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-8.8.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.0.0.z",
          "product_id": "rhel-9.0.0.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.0.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.6.z",
          "product_id": "rhel-9.6.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.6.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.2.0.z",
          "product_id": "rhel-9.2.0.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.2.0.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.7.z",
          "product_id": "rhel-9.7.z:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.8",
          "product_id": "rhel-9.8:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.7",
          "product_id": "rhel-9.7:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 9.4.z",
          "product_id": "rhel-9.4.z.eus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-9.4.z.eus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.10.z",
          "product_id": "rhel-8.10.z:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-8.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.2.0.z",
          "product_id": "rhel-8.2.0.z.aus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-8.2.0.z.aus"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 8.6.0.z",
          "product_id": "rhel-8.6.0.z.aus:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-8.6.0.z.aus"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-28163",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2023-03-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-7-els.els:thunderbird",
            "rhel-7-els.els:thunderbird.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.10.z:thunderbird",
            "rhel-8.10.z:thunderbird-debuginfo",
            "rhel-8.10.z:thunderbird-debugsource",
            "rhel-8.10.z:thunderbird.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.2.0.z.aus:thunderbird",
            "rhel-8.2.0.z.aus:thunderbird.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.4.0.z.eus:thunderbird",
            "rhel-8.4.0.z.eus:thunderbird-debuginfo",
            "rhel-8.4.0.z.eus:thunderbird-debugsource",
            "rhel-8.4.0.z.eus:thunderbird.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.6.0.z.aus:thunderbird",
            "rhel-8.6.0.z.aus:thunderbird-debuginfo",
            "rhel-8.6.0.z.aus:thunderbird-debugsource",
            "rhel-8.6.0.z.aus:thunderbird.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-8.8.0.z.eus:thunderbird",
            "rhel-8.8.0.z.eus:thunderbird-debuginfo",
            "rhel-8.8.0.z.eus:thunderbird-debugsource",
            "rhel-8.8.0.z.eus:thunderbird.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:thunderbird",
            "rhel-9.0.0.z.eus:thunderbird.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:thunderbird",
            "rhel-9.2.0.z.eus:thunderbird-debuginfo",
            "rhel-9.2.0.z.eus:thunderbird-debugsource",
            "rhel-9.2.0.z.eus:thunderbird.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.4.z.eus:thunderbird",
            "rhel-9.4.z.eus:thunderbird-debuginfo",
            "rhel-9.4.z.eus:thunderbird-debugsource",
            "rhel-9.4.z.eus:thunderbird.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.6.z.eus:thunderbird",
            "rhel-9.6.z.eus:thunderbird-debuginfo",
            "rhel-9.6.z.eus:thunderbird-debugsource",
            "rhel-9.6.z.eus:thunderbird.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7.z:thunderbird",
            "rhel-9.7.z:thunderbird.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.7:thunderbird",
            "rhel-9.7:thunderbird.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src",
            "rhel-9.8:thunderbird",
            "rhel-9.8:thunderbird.src"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue that when downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the current user's context. This bug only affects Firefox on Windows. Other versions of Firefox are unaffected.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "rhel-6-els.els:firefox",
          "rhel-6-els.els:firefox.src",
          "rhel-6-els.els:thunderbird",
          "rhel-6-els.els:thunderbird.src",
          "rhel-7-els.els:firefox",
          "rhel-7-els.els:firefox-debuginfo",
          "rhel-7-els.els:firefox.src",
          "rhel-7-els.els:thunderbird",
          "rhel-7-els.els:thunderbird.src",
          "rhel-8.10.z:firefox",
          "rhel-8.10.z:firefox-debuginfo",
          "rhel-8.10.z:firefox-debugsource",
          "rhel-8.10.z:firefox.src",
          "rhel-8.10.z:thunderbird",
          "rhel-8.10.z:thunderbird-debuginfo",
          "rhel-8.10.z:thunderbird-debugsource",
          "rhel-8.10.z:thunderbird.src",
          "rhel-8.2.0.z.aus:firefox",
          "rhel-8.2.0.z.aus:firefox.src",
          "rhel-8.2.0.z.aus:thunderbird",
          "rhel-8.2.0.z.aus:thunderbird.src",
          "rhel-8.4.0.z.eus:firefox",
          "rhel-8.4.0.z.eus:firefox-debuginfo",
          "rhel-8.4.0.z.eus:firefox-debugsource",
          "rhel-8.4.0.z.eus:firefox.src",
          "rhel-8.4.0.z.eus:thunderbird",
          "rhel-8.4.0.z.eus:thunderbird-debuginfo",
          "rhel-8.4.0.z.eus:thunderbird-debugsource",
          "rhel-8.4.0.z.eus:thunderbird.src",
          "rhel-8.6.0.z.aus:firefox",
          "rhel-8.6.0.z.aus:firefox-debuginfo",
          "rhel-8.6.0.z.aus:firefox-debugsource",
          "rhel-8.6.0.z.aus:firefox.src",
          "rhel-8.6.0.z.aus:thunderbird",
          "rhel-8.6.0.z.aus:thunderbird-debuginfo",
          "rhel-8.6.0.z.aus:thunderbird-debugsource",
          "rhel-8.6.0.z.aus:thunderbird.src",
          "rhel-8.8.0.z.eus:firefox",
          "rhel-8.8.0.z.eus:firefox-debuginfo",
          "rhel-8.8.0.z.eus:firefox-debugsource",
          "rhel-8.8.0.z.eus:firefox.src",
          "rhel-8.8.0.z.eus:thunderbird",
          "rhel-8.8.0.z.eus:thunderbird-debuginfo",
          "rhel-8.8.0.z.eus:thunderbird-debugsource",
          "rhel-8.8.0.z.eus:thunderbird.src",
          "rhel-9.0.0.z.eus:firefox",
          "rhel-9.0.0.z.eus:firefox-x11",
          "rhel-9.0.0.z.eus:firefox.src",
          "rhel-9.0.0.z.eus:thunderbird",
          "rhel-9.0.0.z.eus:thunderbird.src",
          "rhel-9.2.0.z.eus:firefox",
          "rhel-9.2.0.z.eus:firefox-debuginfo",
          "rhel-9.2.0.z.eus:firefox-debugsource",
          "rhel-9.2.0.z.eus:firefox-x11",
          "rhel-9.2.0.z.eus:firefox.src",
          "rhel-9.2.0.z.eus:thunderbird",
          "rhel-9.2.0.z.eus:thunderbird-debuginfo",
          "rhel-9.2.0.z.eus:thunderbird-debugsource",
          "rhel-9.2.0.z.eus:thunderbird.src",
          "rhel-9.4.z.eus:firefox",
          "rhel-9.4.z.eus:firefox-debuginfo",
          "rhel-9.4.z.eus:firefox-debugsource",
          "rhel-9.4.z.eus:firefox-x11",
          "rhel-9.4.z.eus:firefox.src",
          "rhel-9.4.z.eus:thunderbird",
          "rhel-9.4.z.eus:thunderbird-debuginfo",
          "rhel-9.4.z.eus:thunderbird-debugsource",
          "rhel-9.4.z.eus:thunderbird.src",
          "rhel-9.6.z.eus:firefox",
          "rhel-9.6.z.eus:firefox-debuginfo",
          "rhel-9.6.z.eus:firefox-debugsource",
          "rhel-9.6.z.eus:firefox-x11",
          "rhel-9.6.z.eus:firefox.src",
          "rhel-9.6.z.eus:thunderbird",
          "rhel-9.6.z.eus:thunderbird-debuginfo",
          "rhel-9.6.z.eus:thunderbird-debugsource",
          "rhel-9.6.z.eus:thunderbird.src",
          "rhel-9.7.z:firefox",
          "rhel-9.7.z:firefox-x11",
          "rhel-9.7.z:firefox.src",
          "rhel-9.7.z:thunderbird",
          "rhel-9.7.z:thunderbird.src",
          "rhel-9.7:firefox",
          "rhel-9.7:firefox-x11",
          "rhel-9.7:firefox.src",
          "rhel-9.7:thunderbird",
          "rhel-9.7:thunderbird.src",
          "rhel-9.8:firefox",
          "rhel-9.8:firefox-x11",
          "rhel-9.8:firefox.src",
          "rhel-9.8:thunderbird",
          "rhel-9.8:thunderbird.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-28163"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28163"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-28163"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-7-els.els:thunderbird",
            "rhel-7-els.els:thunderbird.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.10.z:thunderbird",
            "rhel-8.10.z:thunderbird-debuginfo",
            "rhel-8.10.z:thunderbird-debugsource",
            "rhel-8.10.z:thunderbird.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.2.0.z.aus:thunderbird",
            "rhel-8.2.0.z.aus:thunderbird.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.4.0.z.eus:thunderbird",
            "rhel-8.4.0.z.eus:thunderbird-debuginfo",
            "rhel-8.4.0.z.eus:thunderbird-debugsource",
            "rhel-8.4.0.z.eus:thunderbird.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.6.0.z.aus:thunderbird",
            "rhel-8.6.0.z.aus:thunderbird-debuginfo",
            "rhel-8.6.0.z.aus:thunderbird-debugsource",
            "rhel-8.6.0.z.aus:thunderbird.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-8.8.0.z.eus:thunderbird",
            "rhel-8.8.0.z.eus:thunderbird-debuginfo",
            "rhel-8.8.0.z.eus:thunderbird-debugsource",
            "rhel-8.8.0.z.eus:thunderbird.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:thunderbird",
            "rhel-9.0.0.z.eus:thunderbird.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:thunderbird",
            "rhel-9.2.0.z.eus:thunderbird-debuginfo",
            "rhel-9.2.0.z.eus:thunderbird-debugsource",
            "rhel-9.2.0.z.eus:thunderbird.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.4.z.eus:thunderbird",
            "rhel-9.4.z.eus:thunderbird-debuginfo",
            "rhel-9.4.z.eus:thunderbird-debugsource",
            "rhel-9.4.z.eus:thunderbird.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.6.z.eus:thunderbird",
            "rhel-9.6.z.eus:thunderbird-debuginfo",
            "rhel-9.6.z.eus:thunderbird-debugsource",
            "rhel-9.6.z.eus:thunderbird.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7.z:thunderbird",
            "rhel-9.7.z:thunderbird.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.7:thunderbird",
            "rhel-9.7:thunderbird.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src",
            "rhel-9.8:thunderbird",
            "rhel-9.8:thunderbird.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src",
            "rhel-7-els.els:thunderbird",
            "rhel-7-els.els:thunderbird.src",
            "rhel-8.10.z:firefox",
            "rhel-8.10.z:firefox-debuginfo",
            "rhel-8.10.z:firefox-debugsource",
            "rhel-8.10.z:firefox.src",
            "rhel-8.10.z:thunderbird",
            "rhel-8.10.z:thunderbird-debuginfo",
            "rhel-8.10.z:thunderbird-debugsource",
            "rhel-8.10.z:thunderbird.src",
            "rhel-8.2.0.z.aus:firefox",
            "rhel-8.2.0.z.aus:firefox.src",
            "rhel-8.2.0.z.aus:thunderbird",
            "rhel-8.2.0.z.aus:thunderbird.src",
            "rhel-8.4.0.z.eus:firefox",
            "rhel-8.4.0.z.eus:firefox-debuginfo",
            "rhel-8.4.0.z.eus:firefox-debugsource",
            "rhel-8.4.0.z.eus:firefox.src",
            "rhel-8.4.0.z.eus:thunderbird",
            "rhel-8.4.0.z.eus:thunderbird-debuginfo",
            "rhel-8.4.0.z.eus:thunderbird-debugsource",
            "rhel-8.4.0.z.eus:thunderbird.src",
            "rhel-8.6.0.z.aus:firefox",
            "rhel-8.6.0.z.aus:firefox-debuginfo",
            "rhel-8.6.0.z.aus:firefox-debugsource",
            "rhel-8.6.0.z.aus:firefox.src",
            "rhel-8.6.0.z.aus:thunderbird",
            "rhel-8.6.0.z.aus:thunderbird-debuginfo",
            "rhel-8.6.0.z.aus:thunderbird-debugsource",
            "rhel-8.6.0.z.aus:thunderbird.src",
            "rhel-8.8.0.z.eus:firefox",
            "rhel-8.8.0.z.eus:firefox-debuginfo",
            "rhel-8.8.0.z.eus:firefox-debugsource",
            "rhel-8.8.0.z.eus:firefox.src",
            "rhel-8.8.0.z.eus:thunderbird",
            "rhel-8.8.0.z.eus:thunderbird-debuginfo",
            "rhel-8.8.0.z.eus:thunderbird-debugsource",
            "rhel-8.8.0.z.eus:thunderbird.src",
            "rhel-9.0.0.z.eus:firefox",
            "rhel-9.0.0.z.eus:firefox-x11",
            "rhel-9.0.0.z.eus:firefox.src",
            "rhel-9.0.0.z.eus:thunderbird",
            "rhel-9.0.0.z.eus:thunderbird.src",
            "rhel-9.2.0.z.eus:firefox",
            "rhel-9.2.0.z.eus:firefox-debuginfo",
            "rhel-9.2.0.z.eus:firefox-debugsource",
            "rhel-9.2.0.z.eus:firefox-x11",
            "rhel-9.2.0.z.eus:firefox.src",
            "rhel-9.2.0.z.eus:thunderbird",
            "rhel-9.2.0.z.eus:thunderbird-debuginfo",
            "rhel-9.2.0.z.eus:thunderbird-debugsource",
            "rhel-9.2.0.z.eus:thunderbird.src",
            "rhel-9.4.z.eus:firefox",
            "rhel-9.4.z.eus:firefox-debuginfo",
            "rhel-9.4.z.eus:firefox-debugsource",
            "rhel-9.4.z.eus:firefox-x11",
            "rhel-9.4.z.eus:firefox.src",
            "rhel-9.4.z.eus:thunderbird",
            "rhel-9.4.z.eus:thunderbird-debuginfo",
            "rhel-9.4.z.eus:thunderbird-debugsource",
            "rhel-9.4.z.eus:thunderbird.src",
            "rhel-9.6.z.eus:firefox",
            "rhel-9.6.z.eus:firefox-debuginfo",
            "rhel-9.6.z.eus:firefox-debugsource",
            "rhel-9.6.z.eus:firefox-x11",
            "rhel-9.6.z.eus:firefox.src",
            "rhel-9.6.z.eus:thunderbird",
            "rhel-9.6.z.eus:thunderbird-debuginfo",
            "rhel-9.6.z.eus:thunderbird-debugsource",
            "rhel-9.6.z.eus:thunderbird.src",
            "rhel-9.7.z:firefox",
            "rhel-9.7.z:firefox-x11",
            "rhel-9.7.z:firefox.src",
            "rhel-9.7.z:thunderbird",
            "rhel-9.7.z:thunderbird.src",
            "rhel-9.7:firefox",
            "rhel-9.7:firefox-x11",
            "rhel-9.7:firefox.src",
            "rhel-9.7:thunderbird",
            "rhel-9.7:thunderbird.src",
            "rhel-9.8:firefox",
            "rhel-9.8:firefox-x11",
            "rhel-9.8:firefox.src",
            "rhel-9.8:thunderbird",
            "rhel-9.8:thunderbird.src"
          ]
        }
      ],
      "title": "Windows Save As dialog resolved environment variables"
    }
  ]
}