In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability affects Firefox versions prior to 141.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-8041 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious URL that, when displayed in the address bar of Firefox for Android, would be truncated in a way that misleads the user about the true origin of the site, potentially leading to phishing attacks.
Affected Products
- Firefox for Android: Affected versions are those prior to 141, which display URLs incorrectly in the address bar.
Mitigation
Users are advised to update their Firefox for Android to version 141 or later to mitigate this vulnerability and ensure proper URL display in the address bar.
