CVE-2025-8041
BaseFortify
Publication date: 2025-08-19
Last updated on: 2026-04-13
Assigner: Mozilla Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mozilla | firefox | From 60.9.0 (exc) |
| android | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-451 | The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Firefox for Android causes the address bar to truncate URLs from the end rather than prioritizing the origin part of the URL. This means users may not see the full domain or origin, potentially misleading them about the actual website they are visiting. It affects Firefox versions prior to 141.
How can this vulnerability impact me? :
Because the URL display truncates from the end, users might be misled about the true origin of a website, increasing the risk of phishing or visiting malicious sites unknowingly. This can lead to security risks such as credential theft or malware infection.