CVE-2025-23108 — Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI

CVE-2025-23108

Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI PUBLISHED

Description (CNA)

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox for iOS	unaffected 134 through *

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1933172
https://www.mozilla.org/security/advisories/mfsa2025-06/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.