MEDIUMCVSS 6.5

CVE-2025-23109

CVE-2025-23109 updated by NVD

Modified: 2026-10-07
Sources: nvd

Summary

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address. This vulnerability was fixed in Firefox for iOS 134.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23109

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.