PT-2025-18921 · Unknown+1 · Ublock Origin+1

Dayshift · Published 2025-05-02 · Updated 2025-06-12 · CVE-2025-4215

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions uBlock Origin versions up to 1.63.3b16

Description A vulnerability has been found in the UI component of uBlock Origin, specifically in the function currentStateChanged of the file src/js/1p-filters.js. This issue leads to inefficient regular expression complexity, which can be exploited remotely. The complexity of an attack is rather high, and the exploitability is difficult. The exploit has been disclosed to the public.

Recommendations For versions up to 1.63.3b16, upgrade to version 1.63.3b17 to address this issue. As a temporary workaround, consider restricting the use of the currentStateChanged function in the src/js/1p-filters.js file until the patch is applied.

Exploit

Fix

Resource Exhaustion

DoS

Weakness Enumeration

CWE-400

CWE-1333

Related Identifiers

CVE-2025-4215

DLA-4215-1

Affected Products

Debian

Ublock Origin

References · 20

• 🔥 https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c · Exploit
• https://github.com/gorhill/uBlock/releases/tag/1.63.3b17 · Patch
• https://ubuntu.com/security/CVE-2025-4215 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-4215 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-4215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4215 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-4215 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-4215 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4215-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-4215 · Security Note
• https://vuldb.com/?id.307194 · Note
• https://vuldb.com/?ctiid.307194 · Note
• https://twitter.com/cybercronai/status/1918672002266607646 · Twitter Post
• https://t.me/cvetracker/22968 · Telegram Post
• https://vuldb.com/?submit.562301 · Note