VULNERABILITY INTELLIGENCE
CVE-2025-3035
CVSS score5.3 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2025-04-01
Last modified2026-09-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-359
Primary references
- security@mozilla.org — Permissions Required
- security@mozilla.org — Vendor Advisory