Skip to content
OpenAdvisories
Medium WID-SEC-2025-0050 2 CVEs

Mozilla Firefox: Mehrere Schwachstellen ermöglichen das Darstellen falscher Informationen

Published Jan 12, 2025 · Updated Jan 14, 2025 · Revision 2 · de-DE

Vendor: Mozilla Product: Firefox Platform: iOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um falsche Informationen darzustellen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 2

  • Medium 6.5
    CVE-2025-23109

    Address bar spoofing on iOS using long hostnames

    Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.

    Mozilla Firefox for iOS firefox iOS Browsers Wolfi
  • Medium 4.3
    CVE-2025-23108

    Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI

    Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134.

    Mozilla Firefox for iOS firefox iOS Browsers Wolfi

Revision history

  1. #2

    Korrektur CVSS Bewertung

  2. #1

    Initiale Fassung

References