CVE-2025-23109

EPSS 0.12%
Published 11.01.2025 04:15:06
Last modified 03.04.2025 18:52:57
Source security@mozilla.org
Teams watchlist Login
Open Login

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS < 134.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 134.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.12%	0.311

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://www.mozilla.org/security/advisories/mfsa2025-06/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1419275

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2025-23109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-23109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-23109

EUVD