CVE-2025-11720: Firefox: güvenlik açığı

Açıklama (NVD)

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This vulnerability was fixed in Firefox 144.

Özet bilgiler

Ürün

Mozilla Firefox

CVSS v3.1

8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS

%0,27 (yüzdelik 19)

CWE

CWE-451

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• bugzilla.mozilla.org
• bugzilla.mozilla.org
• www.mozilla.org
• CWE-451