Description
Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mozilla | Firefox for iOS | — | 134 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | firefox | 134-r0 | — |
Advisories 2
- NCSC-2025-0016 Kwetsbaarheden verholpen in Mozilla Firefox en Thunderbird NCSC-NL (Netherlands) · Jan 15, 2025
- WID-SEC-2025-0050 Mozilla Firefox: Mehrere Schwachstellen ermöglichen das Darstellen falscher Informationen BSI CERT-Bund (WID) · Jan 14, 2025