URL Leakage Vulnerability in Firefox and Thunderbird by Mozilla

CVE-2025-8031

What is CVE-2025-8031?

This vulnerability arises when the username:password section is not properly removed from URLs within Content Security Policy (CSP) reports. As a result, it can inadvertently expose users' HTTP Basic Authentication credentials. This issue affects specific versions of Firefox and Thunderbird, potentially leading to unauthorized access to sensitive information transmitted via these applications. Users are encouraged to update to the latest versions to mitigate this risk.

References