CVEvulnerability

CVE-2025-47241

4.0 MEDIUM Published 2025-05-03 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-05-03
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 4.0 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses: CWE-647

Description

In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.

Weakness · CWE (1)

CWE-647 Use of Non-Canonical URL Paths for Authorization Decisions weakness

References

https://github.com/browser-use/browser-use/pull/1561 github.com
https://github.com/browser-use/browser-use/releases/tag/0.1.45 github.com
https://github.com/browser-use/browser-use/security/advisories/GHSA-x39x-9qw5-ghrf github.com

CVE-2025-47241

Description

Related

Weakness · CWE (1)

References