CVE-2025-8038

The frame navigation validation mechanism did not consider the URL path component during verification of whether a given navigation is allowed (CWE-345: lack of verification of data authenticity/integrity). This means that security controls could be bypassed through a specially crafted request path, leading to unauthorized transitions within the embedded frame. The vulnerability is remotely accessible, requires no authentication, and requires no user interaction, making it easy to exploit in practice.

An attacker can bypass frame navigation control mechanisms, potentially gaining unauthorized access to resources, modifying content, or compromising the confidentiality, integrity, and availability of data processed by the application.

Update to Firefox 141 or Firefox ESR 140.1 and Thunderbird 141 or Thunderbird 140.1. Patches are available through Mozilla's automatic update mechanism and on the official product websites referenced.

Mozilla Firefox versions prior to 141 and Firefox ESR versions prior to 140.1; Mozilla Thunderbird versions prior to 141 and Thunderbird versions prior to 140.1.