CVE-2025-23109

EPSS 0.12%
Veröffentlicht 11.01.2025 04:15:06
Zuletzt bearbeitet 03.04.2025 18:52:57
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS < 134.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 134.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.311

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://www.mozilla.org/security/advisories/mfsa2025-06/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1419275

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2025-23109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-23109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-23109

EUVD