4.3 Medium

CVE-2025-3859 Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating…

Description

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138.

Affected products and versions

Product	Affected versions	Fixed in
Focus 138	earliest → < 138	138

References

bugzilla.mozilla.org bugzilla.mozilla.org
www.mozilla.org www.mozilla.org

Timeline

Published April 30, 2025
Last modified April 13, 2026

The 3 CVEs of Focus →

CVE-2022-26485 Mozilla Firefox Use-After-Free Vulnerability 8.8 High CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability 9.6 Critical

Track this CVE

CVE-2025-3859 Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating…

Description

Affected products and versions

References

Timeline

Other CVEs of Focus