8.1
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Description
XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.
Basic Information
ID
CVE-2025-8032
Source
mozilla
Published
Jul 22, 2025 at 20:49
Modified
Jul 23, 2025 at 13:56
Affected Product
Vendor
Mozilla
Product
Firefox
Version
unspecified
Affected Versions
Mozilla Firefox unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
CWE Classification
References
- bugzilla.mozilla.org /show_bug.cgi
- www.mozilla.org /security/advisories/mfsa2025-56/
- www.mozilla.org /security/advisories/mfsa2025-58/
- www.mozilla.org /security/advisories/mfsa2025-59/
- www.mozilla.org /security/advisories/mfsa2025-61/
- www.mozilla.org /security/advisories/mfsa2025-62/
- www.mozilla.org /security/advisories/mfsa2025-63/