{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-20T13:34:34.034","vulnerabilities":[{"cve":{"id":"CVE-2025-27425","sourceIdentifier":"security@mozilla.org","published":"2025-03-04T14:15:39.493","lastModified":"2026-04-13T15:16:55.310","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136."},{"lang":"es","value":"Escanear ciertos códigos QR que incluían texto con la URL de un sitio web podría permitir que la URL se abriera sin presentar primero al usuario una alerta de confirmación. Esta vulnerabilidad afecta a Firefox para iOS < 136."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndExcluding":"136.0","matchCriteriaId":"7DB4CDD0-EC54-43D0-ACB2-F159ABA53D2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*","matchCriteriaId":"B5415705-33E5-46D5-8E4D-9EBADC8C5705"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1941525","source":"security@mozilla.org","tags":["Issue Tracking"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-13/","source":"security@mozilla.org","tags":["Vendor Advisory"]}]}}]}