PT-2025-22992
CVE-2025-5267
·
Published
2025-05-27
·
Updated
2026-09-30
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 139
Firefox ESR versions prior to 128.11
Description
A clickjacking issue could be exploited to trick a user into leaking saved payment card details to a malicious page.
Recommendations
For Firefox versions prior to 139, update to version 139 or later.
For Firefox ESR versions prior to 128.11, update to version 128.11 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾