CVE-2025-5264 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading…
Medium CVSS: 4.8

CVE-2025-5264

Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.
Vendor
Mozilla
Product
Firefox
CWE
CWE-77
Yayın Tarihi
2025-05-27 13:15:22
Güncelleme
2025-11-03 20:19:16
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-77 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1950001 https://www.mozilla.org/security/advisories/mfsa2025-42/ https://www.mozilla.org/security/advisories/mfsa2025-43/ https://www.mozilla.org/security/advisories/mfsa2025-44/ https://www.mozilla.org/security/advisories/mfsa2025-45/ https://www.mozilla.org/security/advisories/mfsa2025-46/ https://lists.debian.org/debian-lts-announce/2025/05/msg00043.html https://lists.debian.org/debian-lts-announce/2025/05/msg00046.html