CVE-2025-3859
Firefox Focus elide URL allows address bar spoofing
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
30 abr 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Productos afectados
Mozilla · Focus¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →