Threats tagged 'ghsa-gx9w-3cv3-7x4r'

CVE-2025-4084 is a vulnerability in Firefox for Windows affecting the "copy as cURL" feature. Due to insufficient escaping of special characters, an attacker could trick a user into executing a crafted cURL command, potentially leading to local code execution on the user's system. This issue affects Firefox ESR versions prior to 128.10 and 115.23. Other Firefox versions and platforms are not affected. The vulnerability has a CVSS score of 5.7 (medium severity).