Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-3029

Опубликовано: 01 апр. 2025
Источник: nvd
CVSS3: 7.3
EPSS Низкий

Описание

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Версия до 128.9.0 (исключая)
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Версия до 137.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 128.9.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 129.0 (включая) до 137.0 (исключая)

EPSS

Процентиль: 26%
0.00087
Низкий

7.3 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7.3
ubuntu
3 месяца назад

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 5.4
redhat
3 месяца назад

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird < 128.9.

CVSS3: 7.3
debian
3 месяца назад

A crafted URL containing specific Unicode characters could have hidden ...

CVSS3: 7.3
github
3 месяца назад

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird ESR < 128.9.

suse-cvrf
2 месяца назад

Security update for MozillaThunderbird

EPSS

Процентиль: 26%
0.00087
Низкий

7.3 High

CVSS3

Дефекты

CWE-290