PT-2025-4825 · Mozilla · Firefox

Khalil Zhani · Published 2025-01-11 · Updated 2025-04-03 · CVE-2025-23109

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 134

Description The issue allows long hostnames in URLs to be used to obscure the actual host of a website or to spoof the website address.

Recommendations For Firefox for iOS versions prior to 134, update to version 134 or later to resolve the issue.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2025-23109

Affected Products

Firefox

References · 11

• https://ubuntu.com/security/CVE-2025-23109 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-06 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-23109 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-23109 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23109 · Security Note
• https://t.me/cvedetector/15035 · Telegram Post
• https://twitter.com/CVEnew/status/1877925979043098645 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1877945551980810377 · Twitter Post
• https://twitter.com/dailycve/status/1907884230652088397 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=1419275 · Note