CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.1. It affects Firefox. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
code execution
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2025-4089
Severity
MEDIUM
CVSS
5.1
EPSS
0.18%
Firefox
Original NVD Description
Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Related CVEs
Other vulnerabilities affecting the same vendor(s)