Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-3859 EUVD-2025-12733GHSA-4jh7-c2vv-7qf2

Firefox Focus elide URL allows address bar spoofing

Published Apr 30, 2025 · Updated Apr 13, 2026 · Assigned by mozilla

Description

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138.

Affected products

VendorProductAffectedFixed
Mozilla Focus — 138

Advisories 1

References