CVE-2025-5265 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leadi…
Medium CVSS: 4.8

CVE-2025-5265

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system.
*This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 139, Firefox ESR < 115.24, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.
Vendor
Mozilla
Product
Firefox
CWE
CWE-77
Yayın Tarihi
2025-05-27 13:15:22
Güncelleme
2025-06-11 12:15:27
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-77 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1962301 https://www.mozilla.org/security/advisories/mfsa2025-42/ https://www.mozilla.org/security/advisories/mfsa2025-43/ https://www.mozilla.org/security/advisories/mfsa2025-44/ https://www.mozilla.org/security/advisories/mfsa2025-45/ https://www.mozilla.org/security/advisories/mfsa2025-46/