REDHAT-BUG-2356556: Medium severity firefox vulnerability
Published Apr 1, 2025
·Updated
A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 137, Firefox ESR < 128.9, Thunderbird < 137, and Thunderbird ESR < 128.9.
Affected Software
4 affected components
Mozilla Firefox<137
Mozilla Firefox ESR<128.9
Mozilla Thunderbird<137
Mozilla Thunderbird<128.9
Event History
Apr 1, 2025
Data Sourced
via Red Hat·01:01 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2356556?
REDHAT-BUG-2356556 is classified as a potential spoofing vulnerability.
2
How do I fix REDHAT-BUG-2356556?
To fix REDHAT-BUG-2356556, update your Firefox or Thunderbird to the latest version.
3
Which versions are affected by REDHAT-BUG-2356556?
REDHAT-BUG-2356556 affects Firefox versions less than 137 and Thunderbird versions less than 137, along with their ESR counterparts.
4
What types of attacks does REDHAT-BUG-2356556 enable?
REDHAT-BUG-2356556 could enable spoofing attacks due to the obfuscation of the true origin of a page.
5
Who is affected by REDHAT-BUG-2356556?
Users of affected versions of Firefox and Thunderbird may be at risk due to REDHAT-BUG-2356556.