CVE-2025-4084

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Apr 29, 2025
Updated: May 9, 2025
CWE ID 116

Summary

CVE-2025-4084 is a vulnerability affecting Firefox for Windows where insufficient escaping of special characters in the "copy as cURL" feature can expose users to local code execution risks. By tricks users into utilizing this command, an attacker could potentially exploit this bug. Notably, this issue only impacts Firefox ESR versions below 128.10, Firefox ESR below 115.23, and Thunderbird below 128.10. Other versions of Firefox remain unaffected.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mozilla Firefox
  • Mozilla Thunderbird

Affected Vendors

  • Mozilla

Advisories, Assessments, and Mitigations