The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link. This vulnerability affects Firefox for iOS versions less than 141.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.4 | CVE-2025-54144 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious link that, when clicked by a user, would redirect them to an arbitrary website or internal page. This requires user interaction, as the user must be tricked into clicking the link.
Affected Products
- Firefox for iOS: Affected versions are those prior to 141, which may allow arbitrary URL access through manipulated search queries.
Mitigation
Users are advised to update their Firefox for iOS to the latest version to mitigate this vulnerability. Additionally, exercising caution when clicking on links from untrusted sources can help prevent exploitation.