CVE-2025-5271

Summary

Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability was fixed in Firefox 139 and Thunderbird 139.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1920348
• https://www.mozilla.org/security/advisories/mfsa2025-42/
• https://www.mozilla.org/security/advisories/mfsa2025-45/

• ←Previous
• Next→