VDB

CNVD-2025-24639

CNVD-2025-24639 PUBLISHED CVSS 5.400000095367432 MEDIUM

Record from circl · Published September 16, 2025

Mozilla Firefox是一款开源Web浏览器。Mozilla Thunderbird是一套从Mozilla Application Suite独立出来的电子邮件客户端软件。该软件支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox和Mozilla Thunderbird存在安全绕过漏洞，攻击者可利用该漏洞绕过安全限制。

Risk scores

CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

VendorProductVersions
MozillaThunderbird143
MozillaFirefox143

Timeline

  • Sep 18, 2025 CVE ID Reserved
  • Sep 18, 2025 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2025-24639
vulnetix vdb fixes CNVD-2025-24639

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2025-24639/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›