CVE-2025-4089 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

CVE-2025-4089

Mozilla Firefox and Thunderbird are vulnerable to local code execution due to insufficient escaping of special characters in the "copy as cURL" feature. An attacker could trick a user into executing a manipulated command, potentially leading to the execution of arbitrary code on the user's system...

CVE-2025-4089

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138...