PatchGap
Firefox · Core

CVE-2025-0244

Spoofing in Core
High CVSS 5.3 firefox Spoofing

Overview

High
Severity
5.3
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impacthigh
DescriptionWhen redirecting to an invalid protocol scheme, an attacker could spoof the address bar. <br>*Note: This issue only affected Android operating systems. Other operating systems are unaffected.*
ComponentCore
Bug ClassSpoofing
Tracker1929584
CWECWE-601
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA KEVNot listed
CreditedUmar Farooq
Disclosed2025-01-07

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page