Beveiligingsadvies

CVE-2025-6434

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-24 12:28:04

Laatst bijgewerkt 2026-04-13 14:31:11

Toegewezen door mozilla

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

← Alle CVE's bekijken Bekijk op cve.org ↗