CVE-2008-4068

CVE-2008-4068 describes a directory traversal vulnerability in older versions of Mozilla Firefox, Thunderbird, and SeaMonkey. This flaw allows remote attackers to bypass security restrictions on local HTML files by using directory traversal sequences within a resource: URI, potentially leading to sensitive information disclosure and prompting users to save this data. With a CVSS score of 7.8 (High), it presents a critical risk due to its network-based attack vector and low attack complexity, enabling complete confidentiality impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.