CVE-2025-3859

Firefox Focus elide URL allows address bar spoofing

Medium · published April 30, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Published
2025-04-30T16:30Z
EPSS history
Timeline
  • 30 APR 16:30Z
    Firefox Focus elide URL allows address bar spoofing
    cvelistv5