CVE-2025-4084

Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10.

CVSS v3 5.7 MEDIUM

5.7^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198	Broken Link
https://www.mozilla.org/security/advisories/mfsa2025-29/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-30/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-32/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox:::::esr:::*
	cpe:2.3:a:mozilla:firefox:::::esr:::*
	cpe:2.3:a:mozilla:thunderbird:::::esr:::*

History

09 May 2025, 19:33

Type	Values Removed	Values Added
References	~~() https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 -~~	() https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198 - Broken Link
References	~~() https://www.mozilla.org/security/advisories/mfsa2025-29/ -~~	() https://www.mozilla.org/security/advisories/mfsa2025-29/ - Vendor Advisory
References	~~() https://www.mozilla.org/security/advisories/mfsa2025-30/ -~~	() https://www.mozilla.org/security/advisories/mfsa2025-30/ - Vendor Advisory
References	~~() https://www.mozilla.org/security/advisories/mfsa2025-32/ -~~	() https://www.mozilla.org/security/advisories/mfsa2025-32/ - Vendor Advisory
First Time		Mozilla Mozilla thunderbird Mozilla firefox
CPE		cpe:2.3:a:mozilla:thunderbird:::::esr:::* cpe:2.3:a:mozilla:firefox:::::esr:::*

02 May 2025, 16:15

Type	Values Removed	Values Added
CWE		CWE-116
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 5.7

01 May 2025, 15:16

Type	Values Removed	Values Added
Summary		(es) Debido a la insuficiente capacidad de escape de los caracteres especiales en la función "copiar como cURL", un atacante podría engañar a un usuario para que use este comando, lo que podría provocar la ejecución de código local en su sistema. Este error solo afecta a Firefox para Windows. Las demás versiones de Firefox no se ven afectadas. Esta vulnerabilidad afecta a Firefox ESR < 128.10, Firefox ESR < 115.23 y Thunderbird ESR < 128.10.
Summary	(en) Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected. This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird ESR < 128.10.	(en) Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected. This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10.

29 Apr 2025, 14:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-04-29 14:15

Updated : 2025-05-09 19:33

NVD link : CVE-2025-4084

Mitre link : CVE-2025-4084

CVE.ORG link : CVE-2025-4084

JSON object : View

Products Affected

mozilla

thunderbird
firefox

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2025-4084", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2025-04-29T14:15:35.097", "references": [{"url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1949994%2C1956698%2C1960198", "tags": ["Broken Link"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-29/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-30/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-32/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "Due to insufficient escaping of the special characters in the \"copy as cURL\" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system.\n*This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox ESR < 128.10, Firefox ESR < 115.23, and Thunderbird < 128.10."}, {"lang": "es", "value": "Debido a la insuficiente capacidad de escape de los caracteres especiales en la funci\u00f3n \"copiar como cURL\", un atacante podr\u00eda enga\u00f1ar a un usuario para que use este comando, lo que podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo local en su sistema. *Este error solo afecta a Firefox para Windows. Las dem\u00e1s versiones de Firefox no se ven afectadas.* Esta vulnerabilidad afecta a Firefox ESR < 128.10, Firefox ESR < 115.23 y Thunderbird ESR < 128.10."}], "lastModified": "2025-05-09T19:33:28.887", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", "vulnerable": true, "matchCriteriaId": "C120A37E-1333-4278-9527-4F370BC78EA8", "versionEndExcluding": "115.23"}, {"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", "vulnerable": true, "matchCriteriaId": "78457AB7-7F72-41FA-99F5-EE6D2B2AC9F9", "versionEndExcluding": "128.10", "versionStartIncluding": "128.0"}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*", "vulnerable": true, "matchCriteriaId": "DC19822B-CC07-4C6F-BAAD-C7A9C4E73FA9", "versionEndExcluding": "128.10.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}

5.7 /10