CVE-2025-4089 - CERT CVE
ID CVE-2025-4089
Sažetak Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 138 and Thunderbird < 138.
Reference
CVSS
Base: 5.1
Impact: 2.5
Exploitability:2.5
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW NONE
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Zadnje važnije ažuriranje 29-04-2025 - 16:15
Objavljeno 29-04-2025 - 14:15