CVE-2025-10531 - Vulnerability Details - OpenCVE

This vulnerability affects Firefox < 143 and Thunderbird < 143.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Mozilla	Firefox Thunderbird

No data.

No data.

References

Link	Providers
https://bugzilla.mozilla.org/show_bug.cgi?id=1978453
https://www.mozilla.org/security/advisories/mfsa2025-73/
https://www.mozilla.org/security/advisories/mfsa2025-77/

History

Wed, 17 Sep 2025 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-288
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 17 Sep 2025 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mozilla Mozilla firefox Mozilla thunderbird
Vendors & Products		Mozilla Mozilla firefox Mozilla thunderbird

Tue, 16 Sep 2025 15:00:00 +0000

Type	Values Removed	Values Added
Description	This vulnerability affects Firefox < 143.	This vulnerability affects Firefox < 143 and Thunderbird < 143.
References		https://www.mozilla.org/security/advisories/mfsa2025-77/

Tue, 16 Sep 2025 12:45:00 +0000

Type	Values Removed	Values Added
Description		This vulnerability affects Firefox < 143.
References		https://bugzilla.mozilla.org/show_bug.cgi?id=1978453 https://www.mozilla.org/security/advisories/mfsa2025-73/

MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2025-09-16T12:26:38.264Z

Updated: 2025-09-17T14:55:23.386Z

Reserved: 2025-09-16T06:48:41.514Z

Link: CVE-2025-10531

Vulnrichment

Updated: 2025-09-17T14:53:07.895Z

NVD

Status : Received

Published: 2025-09-16T13:15:46.617

Modified: 2025-09-17T15:15:42.020

Link: CVE-2025-10531

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-10531", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2025-09-16T06:48:41.514Z", "datePublished": "2025-09-16T12:26:38.264Z", "dateUpdated": "2025-09-17T14:55:23.386Z"}, "containers": {"cna": {"affected": [{"product": "Firefox", "vendor": "Mozilla", "versions": [{"lessThan": "143", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"lessThan": "143", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability affects Firefox < 143 and Thunderbird < 143.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This vulnerability affects Firefox < 143 and Thunderbird < 143."}]}], "problemTypes": [{"descriptions": [{"description": "Mitigation bypass in the Web Compatibility: Tooling component", "lang": "en", "type": "text"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1978453"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}], "credits": [{"lang": "en", "value": "Nikolaos Mourousias"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2025-09-16T14:55:48.057Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-288", "lang": "en", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-09-17T14:55:19.058842Z", "id": "CVE-2025-10531", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-17T14:55:23.386Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-10531", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-17T14:55:19.058842Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-17T14:53:07.895Z"}}], "cna": {"credits": [{"lang": "en", "value": "Nikolaos Mourousias"}], "affected": [{"vendor": "Mozilla", "product": "Firefox", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "143", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "143", "versionType": "custom"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1978453"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-73/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-77/"}], "descriptions": [{"lang": "en", "value": "This vulnerability affects Firefox < 143 and Thunderbird < 143.", "supportingMedia": [{"type": "text/html", "value": "This vulnerability affects Firefox < 143 and Thunderbird < 143.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Mitigation bypass in the Web Compatibility: Tooling component"}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2025-09-16T14:55:48.057Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10531", "state": "PUBLISHED", "dateUpdated": "2025-09-17T14:55:23.386Z", "dateReserved": "2025-09-16T06:48:41.514Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2025-09-16T12:26:38.264Z", "assignerShortName": "mozilla"}, "dataVersion": "5.1"}