CVE-2025-23109

—

CVSS 3.1

6.5 medium

EPSS

<1%p8

Published

Jan 11, 2025 (Jan 11, 2025)

Modified

Jun 17, 2026

Description

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.

Vendors: mozilla
Products: firefox
Weakness: CWE-346
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.