Orta CVSS 4.3
CVE-2025-6425: Firefox: hassas bilgi ifşası
Açıklama (NVD)
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.
Özet bilgiler
- Ürün
- Mozilla Firefox
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mozilla-firefox | — | — | 115.25.0 |
| mozilla-firefox | — | — | 140.0 |
| mozilla-firefox | 116.0 | — | 128.12.0 |