CVE-2025-55028

Опубликовано: 19 авг. 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1850240
Issue Tracking
Permissions Required
https://www.mozilla.org/security/advisories/mfsa2025-68/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*

Версия до 142.0 (исключая)

EPSS

Процентиль: 13%

0.00222

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

GHSA-h3xr-99q8-227g

CVSS3: 6.5

github

около 1 года назад

Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks This vulnerability affects Firefox for iOS < 142.

BDU:2025-10482

CVSS3: 4.3

fstec