CVE-2025-54144

EPSS 0.03%
Veröffentlicht 19.08.2025 20:52:47
Zuletzt bearbeitet 21.08.2025 18:39:47
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link This vulnerability affects Firefox for iOS < 141.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwPlatformiphone_os Version < 141.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.03%	0.075

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://www.mozilla.org/security/advisories/mfsa2025-60/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1946062

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2025-54144

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-54144

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-54144

EUVD