CVE-2025-3859 — Firefox Focus elide URL allows address bar spoofing
Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were…
Published: 2025-04-30 · CVSS: 4.3 · CVSS 3.1
Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7