CVE-2025-6429 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypass…
Medium CVSS: 6.5

CVE-2025-6429

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140, Firefox ESR < 128.12, Thunderbird < 140, and Thunderbird < 128.12.
Vendor
Mozilla
Product
Firefox
CWE
CWE-116
Yayın Tarihi
2025-06-24 13:15:23
Güncelleme
2025-11-03 20:19:19
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-116 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1970658 https://www.mozilla.org/security/advisories/mfsa2025-51/ https://www.mozilla.org/security/advisories/mfsa2025-53/ https://www.mozilla.org/security/advisories/mfsa2025-54/ https://www.mozilla.org/security/advisories/mfsa2025-55/ https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html