When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 140.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1970151 | Exploit Issue Tracking Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2025-51/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
03 Jul 2025, 16:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google android
Mozilla firefox Mozilla |
|
CPE | cpe:2.3:o:google:android:-:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* |
|
References | () https://www.mozilla.org/security/advisories/mfsa2025-51/ - Vendor Advisory | |
References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1970151 - Exploit, Issue Tracking, Vendor Advisory |
24 Jun 2025, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-06-24 13:15
Updated : 2025-07-03 16:42
NVD link : CVE-2025-6428
Mitre link : CVE-2025-6428
JSON object : View
Products Affected
mozilla
- firefox
- android
CWE
No CWE.