CVE-2025-8041CWE-451

CVE-2025-8041

Medium · published August 20, 2025

CVSS v3.1

5.3

EPSS

Percentile

20.2

In the wild

Unconfirmed

What it is

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00287 · 20.2th percentile
Weakness: CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published: 2025-08-20T01:15Z

Affected products (1)

Product	Versions	Fixed in
mozilla/firefox	< 141.0	141.0

References (3)

https://bugzilla.mozilla.org/show_bug.cgi?id=1670725 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-56/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1670725 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

19 AUG 20:52Z
Incorrect URL truncation in Firefox for Android
cvelistv5