Описание
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 141.
Ссылки
- Issue TrackingPermissions Required
- Issue TrackingPermissions Required
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
4.3 Medium
CVSS3
Дефекты
Связанные уязвимости
A crafted URL using a blob: URI could have hidden the true origin of t ...
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 141.
Уязвимость браузеров Mozilla Firefox, связанная с ложным представлением критической информации пользовательским интерфейсом, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
ALT-PU-2025-10124: package `firefox` update to version 141.0.2-alt1
ALT-PU-2025-11497: package `firefox` update to version 141.0.2-alt0.p10.1
EPSS
4.3 Medium
CVSS3