Beveiligingsadvies

CVE-2025-0239

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-07 16:07:06
Laatst bijgewerkt 2026-04-13 14:30:01
Toegewezen door mozilla
CVSS-score 4.0
Status PUBLISHED

Beschrijving

When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.