CVE-2025-4088 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invok…
Medium CVSS: 6.5

CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox < 138 and Thunderbird < 138.
Vendor
Mozilla
Product
Firefox
CWE
CWE-352
Yayın Tarihi
2025-04-29 14:15:35
Güncelleme
2025-05-09 19:33:06
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-352 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1953521 https://www.mozilla.org/security/advisories/mfsa2025-28/ https://www.mozilla.org/security/advisories/mfsa2025-31/