CVE-2025-8043 Incorrect URL truncation
CriticalCVSS 9.8
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/mozjs102(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs78(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs91(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs102(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/mozjs115(Ubuntu:24.04) | All versions | No fix listed |
| mozilla Firefox | < 141.0 | 141.0 |
| mozilla Thunderbird | < 141.0 | 141.0 |
References
- bugzilla.mozilla.org exploit issue-tracking
- www.mozilla.org vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org