CVE-2025-4084 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leadin…
Medium CVSS: 5.7

CVE-2025-4084

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system.
*This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10.
Vendor
Mozilla
Product
Firefox
CWE
CWE-116
Yayın Tarihi
2025-04-29 14:15:35
Güncelleme
2025-11-03 20:19:10
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-116 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 https://www.mozilla.org/security/advisories/mfsa2025-29/ https://www.mozilla.org/security/advisories/mfsa2025-30/ https://www.mozilla.org/security/advisories/mfsa2025-32/ https://lists.debian.org/debian-lts-announce/2025/05/msg00022.html