CVE-2025-5020

Medium

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the…

mozilla·CWE-939·Published 2025-05-21

CVSS

4.3

EPSS

0.00

KEV

Exploits

cve.orgen

264 chars

Opening maliciously-crafted URLs in Firefox from other apps such as Safari could have allowed attackers to spoof website addresses if the URLs utilized non-HTTP schemes used internally by the Firefox iOS client. This vulnerability was fixed in Firefox for iOS 139.

NVDen

264 chars

NVDes

338 chars

La apertura de URL manipuladas con fines maliciosos en Firefox desde otras aplicaciones como Safari podría haber permitido a los atacantes falsificar direcciones de sitios web si las URL utilizaban esquemas que no fueran HTTP utilizados internamente por el cliente Firefox iOS. Esta vulnerabilidad afecta a Firefox para iOS menor que 139.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
3.1	Secondary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N