Beveiligingsadvies

CVE-2025-6427

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-24 12:28:01

Laatst bijgewerkt 2026-04-13 14:31:00

Toegewezen door mozilla

CVSS-score 9.1

Status PUBLISHED

Beschrijving

An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

← Alle CVE's bekijken Bekijk op cve.org ↗