Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-34r6-q8c8-23mx

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 140.

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox < 140.

EPSS

Процентиль: 9%
0.00189
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 года назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.

CVSS3: 6.1
redhat
около 1 года назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.

CVSS3: 4.3
nvd
около 1 года назад

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.

CVSS3: 4.3
debian
около 1 года назад

When a URL was provided in a link querystring parameter, Firefox for A ...

CVSS3: 4.3
fstec
около 1 года назад

Уязвимость браузера Mozilla Firefox операционных систем Android, связанная с использованием открытой переадресации, позволяющая нарушителю проводить фишинг-атаки

EPSS

Процентиль: 9%
0.00189
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601