CVE-2025-8030_CVE-2025-8030

8.1 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Description

Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

Basic Information

ID CVE-2025-8030

Source mozilla

Published Jul 22, 2025 at 20:49

Modified Jul 24, 2025 at 03:55

Affected Product

Vendor Mozilla

Product Firefox

Version unspecified

Affected Versions Mozilla Firefox unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified

CWE Classification

CWE-94

References

{
    "lastseen": "",
    "description": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.",
    "published": "2025-07-22T20:49:25.931Z",
    "modified": "2025-07-24T03:55:28.704Z",
    "type": "cve",
    "title": "CVE-2025-8030",
    "source": "mozilla",
    "references": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968414\nhttps://www.mozilla.org/security/advisories/mfsa2025-56/\nhttps://www.mozilla.org/security/advisories/mfsa2025-58/\nhttps://www.mozilla.org/security/advisories/mfsa2025-59/\nhttps://www.mozilla.org/security/advisories/mfsa2025-61/\nhttps://www.mozilla.org/security/advisories/mfsa2025-62/\nhttps://www.mozilla.org/security/advisories/mfsa2025-63/",
    "id": "CVE-2025-8030",
    "bulletinFamily": "",
    "cwe": [
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "Mozilla Firefox unspecified\nMozilla Firefox ESR unspecified\nMozilla Firefox ESR unspecified\nMozilla Thunderbird unspecified\nMozilla Thunderbird unspecified\nMozilla Thunderbird unspecified",
    "sourceHref": "",
    "cvss": {
        "score": 8.1,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Firefox",
    "version": "unspecified",
    "vendor": "Mozilla",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}