Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-6432

Опубликовано: 24 июн. 2025
Источник: nvd
CVSS3: 8.6
EPSS Низкий

Описание

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Версия до 140.0 (исключая)

EPSS

Процентиль: 17%
0.00055
Низкий

8.6 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 1 месяца назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 3.4
redhat
около 1 месяца назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.

CVSS3: 8.6
debian
около 1 месяца назад

When Multi-Account Containers was enabled, DNS requests could have byp ...

CVSS3: 8.6
github
около 1 месяца назад

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140.

CVSS3: 8.6
fstec
около 1 месяца назад

Уязвимость функции Multi-Account Container браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности прокси-сервера SOCKS и раскрыть защищаемую информацию

EPSS

Процентиль: 17%
0.00055
Низкий

8.6 High

CVSS3

Дефекты

CWE-200