CVE-2025-6428 — Firefox for Android opened URLs specified in a link querystring parameter
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug…
Published: 2025-06-24 · CVSS: 4.3 · CVSS 3.1
When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7