CVE-2018-12374

CVE-2018-12374 describes a vulnerability in Thunderbird versions prior to 52.9, where decrypted email plaintext could be inadvertently leaked if a user submitted an embedded form by pressing the enter key within a text input field. This medium-severity vulnerability (CVSS 4.3) has a network attack vector and requires user interaction, potentially leading to a limited disclosure of confidential information. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.