CVE-2025-8032highCWE-693

XSLT documents could bypass CSP

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.1epss 0.3%

probabilidade de exploração

0.3%top 74% das CVEs

exploração observada

nãonenhuma fonte reporta

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Produtos afetados

Mozilla · Firefox Mozilla · Thunderbird

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1974407 https://lists.debian.org/debian-lts-announce/2025/07/msg00016.html https://www.mozilla.org/security/advisories/mfsa2025-56/https://www.mozilla.org/security/advisories/mfsa2025-58/https://www.mozilla.org/security/advisories/mfsa2025-59/https://www.mozilla.org/security/advisories/mfsa2025-61/https://www.mozilla.org/security/advisories/mfsa2025-62/https://www.mozilla.org/security/advisories/mfsa2025-63/