2025-04-29 13:13:45
mozilla
PUBLISHED
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the users system. This vulnerability affects Firefox < 138 and Thunderbird < 138.