← Database

CVE-2025-23108

MEDIUM CVSS: 4.3 Published: 2025-01-11 Modified: 2026-06-17

Description

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-79

References