Medium severity6.5NVD Advisory· Published Jan 11, 2025· Updated Jun 17, 2026
CVE-2025-23109
CVE-2025-23109
Description
Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- Range: <134
- osv-coords15 versionspkg:apk/chainguard/firefoxpkg:apk/wolfi/firefoxpkg:deb/ubuntu/[email protected]+build1-0ubuntu0.20.04.1?arch=source&distro=focalpkg:deb/ubuntu/[email protected]?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=noblepkg:deb/ubuntu/[email protected]?arch=source&distro=noblepkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:deb/ubuntu/[email protected]~repack1-0ubuntu4?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/[email protected]?arch=source&distro=esm-infra/bionicpkg:deb/ubuntu/[email protected]?arch=source&distro=focalpkg:deb/ubuntu/[email protected]?arch=source&distro=focalpkg:deb/ubuntu/[email protected]?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=jammypkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.20.04.1?arch=source&distro=focalpkg:deb/ubuntu/thunderbird@1:115.18.0+build1-0ubuntu0.22.04.1?arch=source&distro=jammy
< 134-r0+ 14 more
- (no CPE)range: < 134-r0
- (no CPE)range: < 134-r0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
Patches
Vulnerability mechanics
References
2- www.mozilla.org/security/advisories/mfsa2025-06/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPermissions Required
News mentions
0No linked articles in our index yet.