Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-6432

Опубликовано: 24 июн. 2025
Источник: nvd
CVSS3: 8.6
EPSS Низкий

Описание

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Версия до 140.0 (исключая)

EPSS

Процентиль: 29%
0.00105
Низкий

8.6 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 8.6
ubuntu
10 месяцев назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 3.4
redhat
10 месяцев назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 8.6
debian
10 месяцев назад

When Multi-Account Containers was enabled, DNS requests could have byp ...

CVSS3: 8.6
github
9 месяцев назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140.

CVSS3: 8.6
fstec
10 месяцев назад

Уязвимость функции Multi-Account Container браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности прокси-сервера SOCKS и раскрыть защищаемую информацию

EPSS

Процентиль: 29%
0.00105
Низкий

8.6 High

CVSS3

Дефекты

CWE-200