CVE-2025-4089
EUVD-2025-1265529.04.2025, 14:15
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 < 138.0 |
| mozilla | thunderbird | 𝑥 < 138.0 |
𝑥
= Vulnerable software versions
