by Kastro
Paper/Archive/CVE-2025-8043

CVE-2025-8043

Mozilla Firefox — Incorrect URL truncation

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.7.377 × 207.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.

Affected

ProductAffectedFixed inSource
Firefoxsee advisory141CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbugzilla.mozilla.org/show_bug.cgi?id=1970209refmozilla.org/security/advisories/mfsa2025-56