A spoofing issue has been identified in the Address Bar component of Firefox. This vulnerability affects versions of Firefox prior to 142 and Firefox ESR prior to 140.2. Attackers could exploit this vulnerability to mislead users about the authenticity of the website they are visiting.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-9183 |
Exploitation
To exploit this vulnerability, an attacker would need to craft a malicious website that appears legitimate. By enticing users to visit this site, the attacker could manipulate the Address Bar to display misleading information, potentially leading users to disclose sensitive information.
Affected Products
- Firefox: All versions prior to 142 are affected by this spoofing issue.
- Firefox ESR: All versions prior to 140.2 are also vulnerable.
Mitigation
Users are advised to update their Firefox and Firefox ESR browsers to the latest versions to mitigate this vulnerability. Regularly checking for updates and applying them promptly can help protect against such security issues.