CVE-2025-54145

Опубликовано: 19 авг. 2025

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS < 141.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1946122
Issue Tracking
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2025-60/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*

Версия до 141.0 (исключая)

EPSS

Процентиль: 7%

0.00029

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVE-2025-54145

CVSS3: 9.1

ubuntu

около 1 месяца назад

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability affects Firefox for iOS < 141.

GHSA-3879-gmgh-p53r

CVSS3: 9.1

github

9 дней назад

EPSS

Процентиль: 7%

0.00029

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-601