What is CVE-2025-23109?

CVE-2025-23109 is a medium-severity vulnerability in Mozilla Firefox, classified under Origin Validation Error. CVSS score: 6.5/10. Published 2025-01-11.

How severe is CVE-2025-23109?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Mozilla Firefox

CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.

EPSS: 0.002 (7.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mozilla Firefox
Mozilla Firefox For Ios — versions 134

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

security@mozilla.org (Permissions Required, Issue Tracking)
security@mozilla.org (Vendor Advisory)

Frequently asked questions

What is CVE-2025-23109?: CVE-2025-23109 is a medium-severity vulnerability in Mozilla Firefox, classified under Origin Validation Error. CVSS score: 6.5/10. Published 2025-01-11.
How severe is CVE-2025-23109?: Medium severity. CVSS v3 base score is 6.5 out of 10.