Security Advisory

CVE-2025-4089

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-29 13:13:45

Last updated 2026-04-13 14:28:48

Assigner mozilla

State PUBLISHED

Description

Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the users system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

← Browse all CVEs View on cve.org ↗