CVE-2025-8043: Incorrect URL truncation
Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 141 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0-1 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 141
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-8043?
CVE-2025-8043 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-8043?
To fix CVE-2025-8043, upgrade your Mozilla Firefox installation to version 141 or later.
What type of vulnerability is CVE-2025-8043?
CVE-2025-8043 is a URL truncation vulnerability affecting Mozilla Firefox.
Who is affected by CVE-2025-8043?
Users of Mozilla Firefox versions prior to 141 are affected by CVE-2025-8043.
What impact does CVE-2025-8043 have on users?
CVE-2025-8043 can lead to incorrect processing of URLs, potentially exposing users to security risks.