CVEvulnerability

CVE-2025-3035

5.3 MEDIUM Published 2025-04-01 Modified 2026-09-30 Official page ↗
Status
Modified
Published
2025-04-01
Last modified
2026-09-30
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-359

Description

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.

Affected configurations

• mozilla firefox (< 137.0)

Related

Weakness · CWE (1)

  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness

References