PatchGap
Firefox · Core

CVE-2025-8038

Logic Error in Core
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionFirefox ignored paths when checking the validity of navigations in a frame.
ComponentCore
Bug ClassLogic Error
Tracker1808979
Fix commitbbc2fc0457eb (firefox) +1/-1
CISA KEVNot listed
CreditedLaurin Weger
Disclosed2025-07-22

Files Changed

  • modules/libpref/init/StaticPrefList.yaml

Patch

view commit
diff --git a/modules/libpref/init/StaticPrefList.yaml b/modules/libpref/init/StaticPrefList.yaml
index e38aea02d73..a894cc4449b 100644
--- a/modules/libpref/init/StaticPrefList.yaml
+++ b/modules/libpref/init/StaticPrefList.yaml
@@ -16349,7 +16349,7 @@
 
 - name: security.csp.truncate_blocked_uri_for_frame_navigations
   type: bool
-  value: true
+  value: false
   mirror: always
 
 # Limit the number of CSP reports that are send in a specific timespan.
Loading diff…
On This Page