PT-2025-30490 · Mozilla+1 · Thunderbird+2

Alayersattackers · Published 2025-07-22 · Updated 2025-10-01 · CVE-2025-8043

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Thunderbird versions prior to 141

Description The software incorrectly truncated URLs towards the beginning instead of around the origin.

Recommendations Update Firefox to version 141 or later. Update Thunderbird to version 141 or later.

Exploit

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

ALT-PU-2025-10124

ALT-PU-2025-11495

ALT-PU-2025-11497

ALT-PU-2025-9988

BDU:2025-10492

CVE-2025-8043

OPENSUSE-SU-2025:15386-1

Affected Products

Alt Linux

Firefox

Thunderbird

References · 36

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1970209 · Exploit
• https://osv.dev/vulnerability/CVE-2025-8043 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10492 · Security Note
• https://mozilla.org/security/advisories/mfsa2025-61 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8043 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-56 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8043 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-56 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-8043 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-56/#CVE-2025-8043 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-8043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8043 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15386-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-8037 · Note
• https://suse.com/security/cve/CVE-2025-8039 · Note